Analysis

  • max time kernel
    120s
  • max time network
    125s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230703-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
  • submitted
    30-07-2023 02:37

General

  • Target

    MBSetup (1).exe

  • Size

    2.5MB

  • MD5

    2934dc1e4c95c9c6a9acaad0871af226

  • SHA1

    91cfc4e82bb2fbdccc8c6191f5ac37f9a5257aaa

  • SHA256

    90750197384e4ed5add4587135f91b2e22a6898906e642b1a4953d5131d92af9

  • SHA512

    bce2a73ef06f1284d00313551e2c57e4f7576b27b6c1e6d7bb27bd4597b8c37de8004e9f325c9bad252763173f03af20e4cd4a4d12089b328bc85775eba5c689

  • SSDEEP

    49152:Xe//Bxd1CRAm14cr76YWf0wLZN2DxiIq2dWKsf6vHx:O/iRAm1Lr7utWRq2oQ

Malware Config

Signatures

  • Suspicious use of NtCreateUserProcessOtherParentProcess 1 IoCs
  • Downloads MZ/PE file
  • Drops file in Drivers directory 21 IoCs
  • Modifies RDP port number used by Windows 1 TTPs
  • Sets service image path in registry 2 TTPs 2 IoCs
  • Checks BIOS information in registry 2 TTPs 4 IoCs

    BIOS information is often read in order to detect sandboxing environments.

  • Reads user/profile data of web browsers 2 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

  • Enumerates connected drives 3 TTPs 46 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Drops file in System32 directory 12 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Drops file in Program Files directory 64 IoCs
  • Drops file in Windows directory 1 IoCs
  • Executes dropped EXE 56 IoCs
  • Loads dropped DLL 64 IoCs
  • Registers COM server for autorun 1 TTPs 64 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Checks processor information in registry 2 TTPs 2 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Modifies Internet Explorer settings 1 TTPs 6 IoCs
  • Modifies data under HKEY_USERS 64 IoCs
  • Modifies registry class 64 IoCs
  • Modifies system certificate store 2 TTPs 20 IoCs
  • Suspicious behavior: AddClipboardFormatListener 2 IoCs
  • Suspicious behavior: EnumeratesProcesses 32 IoCs
  • Suspicious behavior: LoadsDriver 10 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 15 IoCs
  • Suspicious use of SendNotifyMessage 12 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Windows\Explorer.EXE
    C:\Windows\Explorer.EXE
    1⤵
      PID:3128
      • C:\Users\Admin\AppData\Local\Temp\MBSetup (1).exe
        "C:\Users\Admin\AppData\Local\Temp\MBSetup (1).exe"
        2⤵
        • Suspicious use of NtCreateUserProcessOtherParentProcess
        • Drops file in Drivers directory
        • Checks BIOS information in registry
        PID:2460
      • C:\Program Files\Malwarebytes\Anti-Malware\mbam.exe
        "C:\Program Files\Malwarebytes\Anti-Malware\mbam.exe"
        2⤵
        • Executes dropped EXE
        • Suspicious behavior: AddClipboardFormatListener
        • Suspicious behavior: EnumeratesProcesses
        PID:4920
    • C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe
      "C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe"
      1⤵
      • Drops file in Drivers directory
      • Enumerates connected drives
      • Drops file in Program Files directory
      • Executes dropped EXE
      • Loads dropped DLL
      • Modifies Internet Explorer settings
      • Modifies data under HKEY_USERS
      • Modifies system certificate store
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of WriteProcessMemory
      PID:5024
      • C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
        "C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe" /Service /Protected
        2⤵
        • Drops file in Drivers directory
        • Drops file in System32 directory
        • Executes dropped EXE
        • Registers COM server for autorun
        • Modifies registry class
        • Suspicious use of AdjustPrivilegeToken
        PID:1632
    • C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
      "C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe"
      1⤵
      • Drops file in Drivers directory
      • Sets service image path in registry
      • Checks BIOS information in registry
      • Enumerates connected drives
      • Drops file in System32 directory
      • Drops file in Program Files directory
      • Drops file in Windows directory
      • Executes dropped EXE
      • Loads dropped DLL
      • Registers COM server for autorun
      • Checks processor information in registry
      • Modifies Internet Explorer settings
      • Modifies data under HKEY_USERS
      • Modifies system certificate store
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of WriteProcessMemory
      PID:4308
      • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig.exe
        ig.exe reseed
        2⤵
        • Executes dropped EXE
        PID:1796
      • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig-0.exe
        ig.exe reseed
        2⤵
          PID:3324
        • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig-1.exe
          ig.exe reseed
          2⤵
          • Executes dropped EXE
          PID:4164
        • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig-2.exe
          ig.exe reseed
          2⤵
          • Executes dropped EXE
          PID:964
        • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig-3.exe
          ig.exe reseed
          2⤵
          • Executes dropped EXE
          PID:4140
        • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig-4.exe
          ig.exe reseed
          2⤵
          • Executes dropped EXE
          PID:4760
        • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig-5.exe
          ig.exe reseed
          2⤵
          • Executes dropped EXE
          PID:3884
        • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig-6.exe
          ig.exe reseed
          2⤵
          • Executes dropped EXE
          PID:336
        • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig-7.exe
          ig.exe reseed
          2⤵
          • Executes dropped EXE
          PID:5068
        • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig-8.exe
          ig.exe reseed
          2⤵
          • Executes dropped EXE
          PID:3404
        • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig-9.exe
          ig.exe reseed
          2⤵
          • Executes dropped EXE
          PID:4936
        • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig-10.exe
          ig.exe reseed
          2⤵
          • Executes dropped EXE
          PID:5112
        • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig-11.exe
          ig.exe reseed
          2⤵
          • Executes dropped EXE
          PID:1564
        • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig-12.exe
          ig.exe reseed
          2⤵
            PID:2320
          • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig-13.exe
            ig.exe reseed
            2⤵
            • Executes dropped EXE
            PID:4012
          • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig-14.exe
            ig.exe reseed
            2⤵
            • Executes dropped EXE
            PID:1956
          • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig-15.exe
            ig.exe reseed
            2⤵
            • Executes dropped EXE
            PID:2636
          • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig-16.exe
            ig.exe reseed
            2⤵
              PID:2136
            • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig-17.exe
              ig.exe reseed
              2⤵
                PID:1228
              • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig-18.exe
                ig.exe reseed
                2⤵
                • Executes dropped EXE
                PID:1960
              • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig-19.exe
                ig.exe reseed
                2⤵
                • Executes dropped EXE
                PID:3688
              • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig-20.exe
                ig.exe reseed
                2⤵
                • Executes dropped EXE
                PID:3080
              • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig-21.exe
                ig.exe reseed
                2⤵
                • Executes dropped EXE
                PID:3232
              • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig-22.exe
                ig.exe reseed
                2⤵
                • Executes dropped EXE
                PID:4284
              • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig-23.exe
                ig.exe reseed
                2⤵
                • Executes dropped EXE
                PID:4616
              • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig-24.exe
                ig.exe reseed
                2⤵
                • Executes dropped EXE
                PID:2888
              • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig-25.exe
                ig.exe reseed
                2⤵
                • Executes dropped EXE
                PID:4332
              • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig-26.exe
                ig.exe reseed
                2⤵
                • Executes dropped EXE
                PID:3324
              • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig-27.exe
                ig.exe reseed
                2⤵
                • Executes dropped EXE
                PID:3352
              • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig-28.exe
                ig.exe reseed
                2⤵
                • Executes dropped EXE
                PID:4104
              • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig-29.exe
                ig.exe reseed
                2⤵
                • Executes dropped EXE
                PID:2204
              • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig-30.exe
                ig.exe reseed
                2⤵
                • Executes dropped EXE
                PID:3344
              • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig-31.exe
                ig.exe reseed
                2⤵
                • Executes dropped EXE
                PID:4168
              • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig-32.exe
                ig.exe reseed
                2⤵
                • Executes dropped EXE
                PID:4384
              • C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
                "C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe"
                2⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Suspicious behavior: AddClipboardFormatListener
                • Suspicious behavior: EnumeratesProcesses
                • Suspicious use of FindShellTrayWindow
                • Suspicious use of SendNotifyMessage
                PID:3052
              • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig-33.exe
                ig.exe reseed
                2⤵
                • Executes dropped EXE
                PID:648
              • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig-34.exe
                ig.exe reseed
                2⤵
                • Executes dropped EXE
                PID:1568
              • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig-35.exe
                ig.exe reseed
                2⤵
                • Executes dropped EXE
                PID:2372
              • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig-36.exe
                ig.exe reseed
                2⤵
                • Executes dropped EXE
                PID:3668
              • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig-37.exe
                ig.exe reseed
                2⤵
                • Executes dropped EXE
                PID:1540
              • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig-38.exe
                ig.exe reseed
                2⤵
                • Executes dropped EXE
                PID:544
              • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig-39.exe
                ig.exe reseed
                2⤵
                • Executes dropped EXE
                PID:852
              • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig-40.exe
                ig.exe reseed
                2⤵
                • Executes dropped EXE
                PID:2320
              • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig-41.exe
                ig.exe reseed
                2⤵
                • Executes dropped EXE
                PID:3748
              • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig-42.exe
                ig.exe reseed
                2⤵
                • Executes dropped EXE
                PID:4380
              • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig-43.exe
                ig.exe reseed
                2⤵
                • Executes dropped EXE
                PID:2872
              • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig-44.exe
                ig.exe reseed
                2⤵
                • Executes dropped EXE
                PID:2136
              • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig-45.exe
                ig.exe reseed
                2⤵
                • Executes dropped EXE
                PID:1228
              • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig-46.exe
                ig.exe reseed
                2⤵
                • Executes dropped EXE
                PID:4136
              • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig-47.exe
                ig.exe reseed
                2⤵
                • Executes dropped EXE
                PID:3256
              • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig-48.exe
                ig.exe reseed
                2⤵
                • Executes dropped EXE
                PID:4500
              • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig-49.exe
                ig.exe reseed
                2⤵
                • Executes dropped EXE
                PID:3220
              • C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
                "C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe"
                2⤵
                  PID:2692
              • C:\Windows\system32\AUDIODG.EXE
                C:\Windows\system32\AUDIODG.EXE 0x4e8 0x49c
                1⤵
                  PID:2424
                • C:\Windows\system32\LogonUI.exe
                  "LogonUI.exe" /flags:0x4 /state0:0xa3934055 /state1:0x41c64e6d
                  1⤵
                  • Modifies data under HKEY_USERS
                  • Suspicious use of SetWindowsHookEx
                  PID:820

                Network

                MITRE ATT&CK Enterprise v15

                Replay Monitor

                Loading Replay Monitor...

                Downloads

                • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\7z.dll

                  Filesize

                  1.7MB

                  MD5

                  461faf68ccc02b0223fd273b630f21fe

                  SHA1

                  363b8beaa74f0f454c2d544ace9e71a84bc2b4cf

                  SHA256

                  cb07f3f461e9c267831b1ab93af6dfda1bb51d72e42d73d00d26594f09326be1

                  SHA512

                  4b671f48e45fdedf50c7f7bb6c8d82a3b98f7502006eb002aaf8ff31f25f9ff1257c7bcc12caf622e43d4ec665b19d978ae3e3762f76def0bc71485ebdb8426f

                • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\Actions.dll

                  Filesize

                  5.0MB

                  MD5

                  1eff53d95ecaf6bbfffe80d866d8e1dd

                  SHA1

                  d7ef7d7c77fd04b2c0eb8c16bb3cd08057f6742f

                  SHA256

                  6dd748f7ca56125cbe158fa3612f08e7312ef58ad5375e6b7ab5532cc16ca0ac

                  SHA512

                  c59b8e6f0b238a247e64b9c7bb42213dadac1dada63542830a6292361174c935c0c662b2d1aed3fb6100cc4993297b1eaf25e328f2b4613458c4ffca63b9f02d

                • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ActionsShim.dll

                  Filesize

                  2.5MB

                  MD5

                  e7a4bb8fa34bc5ae8b84bf15442da99c

                  SHA1

                  26e6d20876f01faa32a7a846c12dd35c695d55b6

                  SHA256

                  9ed946c62c7801779822a83d9126257f6426af381a42ce29d5a3c49c774fc141

                  SHA512

                  10b007f132cdaa7ea2e75281cd7767b59fd61335d28bc55b778e05479ac993e3578ba1370fe1ce6bf35d271ca970346d5f8cd13637f59fb1fa01c8a6345727b1

                • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\BrowserSDKDLL.dll

                  Filesize

                  5.8MB

                  MD5

                  1ed53171d00f440f29a12f9beb84dac4

                  SHA1

                  4d9a1e3579b0999f1ab2fa818b588411e9ee920c

                  SHA256

                  e659e687a872050f9e65d78992d16bd9b393cf3f8e8c94e0e15fb42b7065327e

                  SHA512

                  17161cfc672d1b996b8af4ebac17f9a8a3807f38c9a23e2e5b4dadcd9a21c3a64faec9bf59147022a9df88b80f89300f1b537091289bd7a42806bd206a317e6e

                • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\BrowserSDKDLLShim.dll

                  Filesize

                  2.5MB

                  MD5

                  2e8ad6f405eb7744908f635dc089438a

                  SHA1

                  f2ca3f55ce4395dfe39a0ba099a39f8c30e263cb

                  SHA256

                  4824ad6b30b42a9166bfd3db41f11e3cb67e7aab96058b7f946797d7dadba891

                  SHA512

                  3eacea19caf3f04cddb35091102c5d627b82acc8c73be1bfa4d72932c78cba7821c99c616bbd8d422ce588b865700db560ba441f8a5da6a9629af844f6ad28c5

                • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\CleanControllerImpl.dll

                  Filesize

                  6.9MB

                  MD5

                  dcecc4a121da23fc1c8f8407cd772e9d

                  SHA1

                  f8ad14dcee8ac10ae84b264ecd584ec6595dfbf3

                  SHA256

                  8c7b33918f9e99cb90ea6a8413459211eaf8b2b10febc503bc378e30c2abb1d4

                  SHA512

                  b0c08ffb890446f79146be2c4a6d05c24d856a27c6e8e0155059e5d626816f9a909d5e430138a1a103a9381a3025f2ac73a43d9f25c4500cdb8c92ee7ffd239f

                • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\CloudControllerImpl.dll

                  Filesize

                  4.8MB

                  MD5

                  a22f4dd3f75413faba618de10315540d

                  SHA1

                  450a9abff68ffb922abaa0ba193ea4ffc983e92b

                  SHA256

                  31d628b6c6c58d76dbd8071e155c9bfef575444d3ce7fa83c2a0c3a16e67e7ea

                  SHA512

                  b34bec558e556dc8602717fc8b2601f18d02217551bcb1b3d7df7f9574f7ddf46a29dcfe043119f353e1e258fdc1e9a6db6d38ce8e5f3eda9fdb92216a31ccd6

                • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\LicenseControllerImpl.dll

                  Filesize

                  4.4MB

                  MD5

                  1e102c36c622f1a221f9c7af8a96a6c2

                  SHA1

                  0e350dfa57a7c2c8d4daddc77d4b9da539a917c9

                  SHA256

                  0be22af897b18d15f739363d32ffdcd5f4cdf1e0973dd1dffb949ac3b64e2dca

                  SHA512

                  4c3262d53c9e9508dcaf70bf58c5c9a2b501274fabec186533e21ae6e988d0f54518672b60909901de79c5ade2f6b1d8d7bdc0b29b9150c94e7a28a3e85ef818

                • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\MBAMCore.dll

                  Filesize

                  6.4MB

                  MD5

                  b2216df400c3ef59f9406831ba7956b5

                  SHA1

                  1e26588190fc8a608e773239d498ceb79a92fca3

                  SHA256

                  1e429ee1da8a0fe6569673b7052c5f49c193aaa8f3152451f645539a431b792d

                  SHA512

                  3aa3c9ed3bcaa0f2b7c4de36f7a83e35e8abf63c972c8e5377915bed41a803ae516cf8ef14e9c455043dd1ae46e4aec1820fa3572e65d0c87a99eac1d43d1f40

                • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\MBAMShim.dll

                  Filesize

                  3.0MB

                  MD5

                  f44b6c80c46c4cf3071b5f5b916e1271

                  SHA1

                  839f2238ecbbfa80ebf9c1f77eafc78204b58761

                  SHA256

                  732523df43358729d5e85cceb557d69016dcdd3e2238d903c33c5327c3131fae

                  SHA512

                  99be164ae96bc4f93dc896d5df445ad1c2f023f10605a8c9857d7ebedfc5b070f50cd33b401d61003e601a06b8446e6c0b5dbddda4927a2e1352407d3b266942

                • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\PoliciesControllerImpl.dll

                  Filesize

                  4.1MB

                  MD5

                  5471d57066b9c30fd2ded9353ef0cf85

                  SHA1

                  21d231c088ac7e983f0d620c3f172fa0fa373e3b

                  SHA256

                  1454ea0493b479bff5c3e27a7600d24f61d107451c05902cc6dff4abf86533f0

                  SHA512

                  1409a79e6b35253f3276425de518eb760623065c2c6290fffba3fa9b75675b7456b7cd535c54b7a4b9ca3cc5f5df9231727d2d531e9e824e7192c4e03ce23b83

                • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ScanControllerImpl.dll

                  Filesize

                  5.7MB

                  MD5

                  1a9abeffcee60e21578515799d2cd03f

                  SHA1

                  7477221eefa163f36f5c82a5437dc2513a9b8033

                  SHA256

                  94fa98830adea98a635d03a7971039d72faa5c95fa5da484bdfd94d0519ad8ab

                  SHA512

                  8dfd426666fdbc31f6b74db10f98f79e17fbb88e5d313a5acb336d9f31c72a4eba1a46acfc800eab1a7d5dae7d1c62310c65dd0cf2a91fc1b72e90fe2a300717

                • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\Swissarmy.dll

                  Filesize

                  4.0MB

                  MD5

                  3486801ce1e8ffc1bbc6d4f097b0f369

                  SHA1

                  08f2a85cd07cf1c0d6f27f0d5e7179c2a5cb8600

                  SHA256

                  26720d0b669898089a4ab5a6c53203918ec399d227331273ba11169bbe273678

                  SHA512

                  81974a79bf4e4086549874ef778e7716713a0107ccce212e9564f3355a26670943845aaba744691d2b68224e06e2f9d9a263e29f4ca7e46e1bfdb507a24656d5

                • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\SwissarmyShim.dll

                  Filesize

                  2.6MB

                  MD5

                  89a38afcfa758e3298609c6c51929593

                  SHA1

                  2df1ee30adc92bd995526e41fd9c823354de30b4

                  SHA256

                  4795576483af0c136a71dcee87a0ffb54f0869cae6395ac2ff8312bf555e7161

                  SHA512

                  cceaed0b9a7517aebd739a377c7bd8987b9ac357be2bf987dbae31d59f2121c5bb9a9bfa2c70a9a54ad65546ef23903176dd6328d93408cb5c991257d59e2717

                • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\TelemetryControllerImpl.dll

                  Filesize

                  5.3MB

                  MD5

                  374fb28ae370db522c18adb48a924d28

                  SHA1

                  bbe6edbdc19f222c2a07e8d9d04f45019d5c57f9

                  SHA256

                  36c799a972c91ddda2e758c82341534f89cc84d20e0083e44095cefafe286b5f

                  SHA512

                  08411d4139715f93856a4850158e27cf98858618923339d35bcb12304f6f30f6d2a0e911eb94beb65306018c12978dd6b164e2bc9039a61355bc81900dd2fddd

                • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\UpdateControllerImpl.dll

                  Filesize

                  4.4MB

                  MD5

                  c1242a30d1eb5efc086797c7b05dcca5

                  SHA1

                  a43a4e6df9673e3c9783bd9f1af66f3b79c7a1c2

                  SHA256

                  f556d2524500661fb8710aeac582b08763a75380faf8c6bceabb31abff89edbe

                  SHA512

                  89e2ed95e778a93846fa71db9b81d64c6f1075d731f8f7aec61e5c913f1887540ff9ae2cd42e4c0cae934089b960276e0e3ea80e886de06d0aaf4734c7fdf77b

                • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig.exe

                  Filesize

                  1.8MB

                  MD5

                  14cd82fe89752e3723a9b42aaa68763a

                  SHA1

                  ea407d8d7064581406eb1b14e0f01cee61afb252

                  SHA256

                  60e6029bdf3a2d88772bd4ec3aea6b688505e7dfcb76ce371d6942e9de95ce04

                  SHA512

                  16114ff38a2e2cc59a9bbf420304fda8e558022f385748a5f48c02f037cbe815221a1cb4f0ac1deeb408ebf66ee3e25c059b157c7cc5cb169dbac75a73694fdc

                • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\pkgvers.dat

                  Filesize

                  75B

                  MD5

                  947dc11afea763029f9b732559868f5c

                  SHA1

                  cf7838dba78dee3832f0a3d9ff93c5160f2b44a1

                  SHA256

                  9dc229ba6beb722ab474e37b61d3ba267ad01008f6de057c32829894ea330ef4

                  SHA512

                  0231237cf5711d5ed0991087b778dd7683885ba70a792225e0efb34f2b0c849e48b9969d91947bd9b32d90426e3c4690ab3ed06ab07a77744381eafdf9f4e0bc

                • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\sample.dll

                  Filesize

                  528KB

                  MD5

                  936021397e23fc913c55992ce9468913

                  SHA1

                  d65af889a379f2982b1ebf29d83d2783b9aa0ded

                  SHA256

                  ce7bdd309701942d97bd8cd3c2455a8d37d93b4d9ce4c14986703daf46fab7fb

                  SHA512

                  4fb968bee32b5f2b5a5d1629ec2855dc0150ec6b753e83a457ec704350b1f219b5e1349a75ec41f94757d1ef2de9a020933f8e42566bf6123543b7709ecc3d74

                • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\version.dat

                  Filesize

                  47B

                  MD5

                  283bd24fd1ae55b5b87752c7bf2d09da

                  SHA1

                  dc78595e9b26b76582359418e41d56c7aa679411

                  SHA256

                  b52330abda1e62bed1b65f6afc5507062f6360f6d37b56781bd982bf6a865d33

                  SHA512

                  0fa4116faeb8506ad1b8f9917ed12f0c167bcc36b5e1aa44934bb68a3aa362934968ad72c65ab249947b1477cb0c645d284c1b06fdeafd82d4063f189ab8d61c

                • C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\Global.nm

                  Filesize

                  336KB

                  MD5

                  272049844fc5c5d283951e83a5e8aae4

                  SHA1

                  50d8e160f7793cc97f2f14a05de10c6d345efb49

                  SHA256

                  b6809cf37379b32b3893d6ec0a689428ea75c835021226dc0d4574b42aba2e5e

                  SHA512

                  ad24b671da5b83be226c6b681e2037ad6ebf7c6524aa752a6ae4fe815eb25be142ce2df905252831f3a76e9c0378b60072fce02f4c26bfd4d53830f60a08c161

                • C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\Global.sr

                  Filesize

                  17.6MB

                  MD5

                  d4ac73ac638b262ae982d97415611ca1

                  SHA1

                  1a074815ecd927f55fad11d415c61954443afe55

                  SHA256

                  103357ad0b9adb971b64a82d088de75f080446636ea477327b56e004687407da

                  SHA512

                  5e5accbbe3ef2edb2300a9f4dc4dd67d7ea2e2a20b8ffd26ce4381d1b7bc630764984366fc720068bd462003f2820ec2c2307a756f3731b509ad55011431942e

                • C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\cfg.bin

                  Filesize

                  661B

                  MD5

                  8fd13803b1e5f14b4d241facc601a170

                  SHA1

                  7321eec794bc766d84d75bd0370a9f2e4d7abdf6

                  SHA256

                  925d771b2643715b62ef720801dfa96047fff1ee70eabb244bed802234673717

                  SHA512

                  f5b3514258487f8576fe32a795eefcffef049c7d002a6abdca17383bba838c7a218be23ec6803dcefed615f40afc2ba4b15bf65c9a74c4f6bb891d15d02bfc22

                • C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\clean.mbdb

                  Filesize

                  10KB

                  MD5

                  6f9b49be0223ac79a713fb1472f890bd

                  SHA1

                  6d89aea5a4823556b005a381b9334acb68a01210

                  SHA256

                  33a14b9ff0c92254945b0495a822611a0170daf4c0ce0dc4203a181c678dbb78

                  SHA512

                  7b8df6420fd719fccbe1c4a7874514362ca06e20cd12dc3f788ebaaa3150e301d0e975b50bb52d1bf99f7f835b1ebf45fadc53fe7be9fdf74777ff90c1ffd95f

                • C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\dbmanifest2.dat

                  Filesize

                  924B

                  MD5

                  68fe113571e46200ead41766ddeb4e4f

                  SHA1

                  0da4095f06e6406ce8b27a90a54d129dc2aa87ec

                  SHA256

                  a8ab8b7fd0c3b3478a97a6e17f96062e7c823b0f4bbfa11f6f29fc5dcfc1ffe9

                  SHA512

                  099b3250b1bec83a1a3fd58b980e22a93d57bece0fbdd7c785486495344ae524e5507148a6600244168c5d995768cfd7d64700dbf43abe056186890464bc13cb

                • C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\dynconfig.dat

                  Filesize

                  39KB

                  MD5

                  10f23e7c8c791b91c86cd966d67b7bc7

                  SHA1

                  3f596093b2bc33f7a2554818f8e41adbbd101961

                  SHA256

                  008254ca1f4d6415da89d01a4292911de6135b42833156720a841a22685765dc

                  SHA512

                  2d1b21371ada038323be412945994d030ee8a9007db072484724616c8597c6998a560bc28886ebf89e2c8919fb70d76c98338d88832351823027491c98d48118

                • C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\exclusions.txt

                  Filesize

                  23KB

                  MD5

                  aef4eca7ee01bb1a146751c4d0510d2d

                  SHA1

                  5cf2273da41147126e5e1eabd3182f19304eea25

                  SHA256

                  9e87e4c9da3337c63b7f0e6ed0eb71696121c74e18a5da577215e18097715e2f

                  SHA512

                  d31d21e37b0048050b19600f8904354cff3f3ec8291c5a7a54267e14af9fb88dfb6d11e74a037cc0369ade8a8fb9b753861f3b3fb2219563e8ec359f66c042db

                • C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\mbdigsig2.dat

                  Filesize

                  514B

                  MD5

                  cb9f6607be84c12afc4e2254a9ee3265

                  SHA1

                  f37dc67aca546a3efca9eb69477b42f42671a0e9

                  SHA256

                  f9df201d9611dd9e4a6ab34464e0086fd8199f086f7f3879c3ce916ff7d74a8d

                  SHA512

                  0476531419159d29ea030fba47bc2076597f4a368480ef24492fc4a6de76495f65c43be627b9c1a3d8d85da75653a0bbe6266d3db79bc2395880a0f6a9fd9ea6

                • C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\prot.mbdb

                  Filesize

                  24B

                  MD5

                  546d9e30eadad8b22f5b3ffa875144bf

                  SHA1

                  3b323ffef009bfe0662c2bd30bb06af6dfc68e4d

                  SHA256

                  6089fbf0c0c1413f62e91dc9497bedc6d8a271e9dc761e20adc0dccf6f4a0c1f

                  SHA512

                  3478f5dcf7af549dd6fe48ad714604200de84a90120b16a32233b6d44fa7240f5f4e5fe803f54b86bbdfd10fa1bfdd88fb85eb6a78e23e426933f98d0a2565ec

                • C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\rdefs.mbdb

                  Filesize

                  24B

                  MD5

                  2f7423ca7c6a0f1339980f3c8c7de9f8

                  SHA1

                  102c77faa28885354cfe6725d987bc23bc7108ba

                  SHA256

                  850a4ea37a0fd6f68bf95422d502b2d1257264eb90cc38c0a3b1b95aa375be55

                  SHA512

                  e922ac8a7a2cde6d387f8698207cf5efbd45b646986a090e3549d97a7d552dd74179bd7ac20b7d246ca49d340c4c168982c65b4749df760857810b2358e7eb69

                • C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\rules.mbdb

                  Filesize

                  8.4MB

                  MD5

                  a310c065cfb767ea695b621053b93374

                  SHA1

                  cb5cb7e81c40626fb0e76182bfd43629ad21fc83

                  SHA256

                  d1bdbb4c2d64d848606830357d012d0e8760ce9e34cd8f8efcd89eeb4e151d7a

                  SHA512

                  e71aede3506deac70f338111078d047cc67e30fcb56cae253766a5519d3b99d770ef7150837b9070b7ca667cd617c3959e3624fc6aaec570dd6a02551ed36915

                • C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\scan.mbdb

                  Filesize

                  1.0MB

                  MD5

                  b5011b9b5101f05dcd6f8b0bc68fc862

                  SHA1

                  f7f929b627fbaa1f9bee783581246dc79450a1cb

                  SHA256

                  6da3f6a1f6c5d733fb181939e7022ebe8ac27821be009f37dc2dcd82f9187da3

                  SHA512

                  fee3e4d5a4f2bff04f6ba2eabca6e7c7996b4829fbaf5834ecd0034817d555a068040f3249978dec0de2d74ad1fa48fec769cfb65907d34eea733ddadff23986

                • C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\tids.mbdb

                  Filesize

                  177KB

                  MD5

                  34a17cc7d36376d2bfc1c62152e5b18e

                  SHA1

                  e5628598f0cb06e5625e238f721ea73a841574ac

                  SHA256

                  2b4c2e7eb136b1b98658fec8c77469230579eee5cb3c750ce348787ebde9808a

                  SHA512

                  9fbc326310023b15bc6c5df1c7aeefc10ec94cd930eb72a0a499f7242ca908da2902ecd7754d825910e2647eb1c3dfe38325ff1822a1e77c6d6049316ee55848

                • C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\wprot2.mbdb

                  Filesize

                  41.7MB

                  MD5

                  2665dfe8654385a67b6da7b6c2a0d880

                  SHA1

                  1054c8487d0934d6191ea5c03216cc473f791428

                  SHA256

                  2c767eb2cfc154bacf2f110e82dd0929913c66ca6550a44cd11348e83a4442c8

                  SHA512

                  c2db11067d1acb6d733c7ea788e94fb0aa7457751e7879125ae424cee10a97e0edf1167108f6c2ffd5bb1461869f71ab0757d5a88c83903fd8151ee5e2dfef86

                • C:\Program Files\Malwarebytes\Anti-Malware\7z.dll

                  Filesize

                  1.7MB

                  MD5

                  461faf68ccc02b0223fd273b630f21fe

                  SHA1

                  363b8beaa74f0f454c2d544ace9e71a84bc2b4cf

                  SHA256

                  cb07f3f461e9c267831b1ab93af6dfda1bb51d72e42d73d00d26594f09326be1

                  SHA512

                  4b671f48e45fdedf50c7f7bb6c8d82a3b98f7502006eb002aaf8ff31f25f9ff1257c7bcc12caf622e43d4ec665b19d978ae3e3762f76def0bc71485ebdb8426f

                • C:\Program Files\Malwarebytes\Anti-Malware\Actions.dll

                  Filesize

                  5.0MB

                  MD5

                  1eff53d95ecaf6bbfffe80d866d8e1dd

                  SHA1

                  d7ef7d7c77fd04b2c0eb8c16bb3cd08057f6742f

                  SHA256

                  6dd748f7ca56125cbe158fa3612f08e7312ef58ad5375e6b7ab5532cc16ca0ac

                  SHA512

                  c59b8e6f0b238a247e64b9c7bb42213dadac1dada63542830a6292361174c935c0c662b2d1aed3fb6100cc4993297b1eaf25e328f2b4613458c4ffca63b9f02d

                • C:\Program Files\Malwarebytes\Anti-Malware\ActionsShim.dll

                  Filesize

                  2.5MB

                  MD5

                  e7a4bb8fa34bc5ae8b84bf15442da99c

                  SHA1

                  26e6d20876f01faa32a7a846c12dd35c695d55b6

                  SHA256

                  9ed946c62c7801779822a83d9126257f6426af381a42ce29d5a3c49c774fc141

                  SHA512

                  10b007f132cdaa7ea2e75281cd7767b59fd61335d28bc55b778e05479ac993e3578ba1370fe1ce6bf35d271ca970346d5f8cd13637f59fb1fa01c8a6345727b1

                • C:\Program Files\Malwarebytes\Anti-Malware\CleanControllerImpl.dll

                  Filesize

                  6.9MB

                  MD5

                  dcecc4a121da23fc1c8f8407cd772e9d

                  SHA1

                  f8ad14dcee8ac10ae84b264ecd584ec6595dfbf3

                  SHA256

                  8c7b33918f9e99cb90ea6a8413459211eaf8b2b10febc503bc378e30c2abb1d4

                  SHA512

                  b0c08ffb890446f79146be2c4a6d05c24d856a27c6e8e0155059e5d626816f9a909d5e430138a1a103a9381a3025f2ac73a43d9f25c4500cdb8c92ee7ffd239f

                • C:\Program Files\Malwarebytes\Anti-Malware\CloudControllerImpl.dll

                  Filesize

                  4.8MB

                  MD5

                  a22f4dd3f75413faba618de10315540d

                  SHA1

                  450a9abff68ffb922abaa0ba193ea4ffc983e92b

                  SHA256

                  31d628b6c6c58d76dbd8071e155c9bfef575444d3ce7fa83c2a0c3a16e67e7ea

                  SHA512

                  b34bec558e556dc8602717fc8b2601f18d02217551bcb1b3d7df7f9574f7ddf46a29dcfe043119f353e1e258fdc1e9a6db6d38ce8e5f3eda9fdb92216a31ccd6

                • C:\Program Files\Malwarebytes\Anti-Malware\LicenseControllerImpl.dll

                  Filesize

                  4.4MB

                  MD5

                  1e102c36c622f1a221f9c7af8a96a6c2

                  SHA1

                  0e350dfa57a7c2c8d4daddc77d4b9da539a917c9

                  SHA256

                  0be22af897b18d15f739363d32ffdcd5f4cdf1e0973dd1dffb949ac3b64e2dca

                  SHA512

                  4c3262d53c9e9508dcaf70bf58c5c9a2b501274fabec186533e21ae6e988d0f54518672b60909901de79c5ade2f6b1d8d7bdc0b29b9150c94e7a28a3e85ef818

                • C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe

                  Filesize

                  8.7MB

                  MD5

                  7f34dad4e136c6130a32e035befa9a52

                  SHA1

                  f06d24d798fdf43c04c5b0b9713253860f405511

                  SHA256

                  943e93dda161b055724444b210696ca44f957eccdfe1e63c66b722fc4fc6bc63

                  SHA512

                  cd3b8c989618765ceea14dc37dbbb9e3421c0730cf2acc01acc5881442caa5a83730e919e6ac17cf5e97d853a4cc2bdbeae9e98cf7ab3a2c26cd41b10187e91c

                • C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe

                  Filesize

                  8.7MB

                  MD5

                  7f34dad4e136c6130a32e035befa9a52

                  SHA1

                  f06d24d798fdf43c04c5b0b9713253860f405511

                  SHA256

                  943e93dda161b055724444b210696ca44f957eccdfe1e63c66b722fc4fc6bc63

                  SHA512

                  cd3b8c989618765ceea14dc37dbbb9e3421c0730cf2acc01acc5881442caa5a83730e919e6ac17cf5e97d853a4cc2bdbeae9e98cf7ab3a2c26cd41b10187e91c

                • C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe

                  Filesize

                  8.8MB

                  MD5

                  827d180e861f5a10fa29f6e6b8807a4d

                  SHA1

                  540108d1280b60bd28f5e1fabce38bdcec91e93e

                  SHA256

                  fda3d2617c7cab61e148d08e3d10f3f5468a37eb500b91efecae626f2aaa6c27

                  SHA512

                  6d46063e0c8518c5dc0a8e827d2543d64edc3e20feb113d1de1ebf0c410a37f9ba9098eaefb01e88024bc8cd11c618ffdace2cc0724a2b4788b4dd233cbb8e80

                • C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe

                  Filesize

                  8.8MB

                  MD5

                  827d180e861f5a10fa29f6e6b8807a4d

                  SHA1

                  540108d1280b60bd28f5e1fabce38bdcec91e93e

                  SHA256

                  fda3d2617c7cab61e148d08e3d10f3f5468a37eb500b91efecae626f2aaa6c27

                  SHA512

                  6d46063e0c8518c5dc0a8e827d2543d64edc3e20feb113d1de1ebf0c410a37f9ba9098eaefb01e88024bc8cd11c618ffdace2cc0724a2b4788b4dd233cbb8e80

                • C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe

                  Filesize

                  8.8MB

                  MD5

                  827d180e861f5a10fa29f6e6b8807a4d

                  SHA1

                  540108d1280b60bd28f5e1fabce38bdcec91e93e

                  SHA256

                  fda3d2617c7cab61e148d08e3d10f3f5468a37eb500b91efecae626f2aaa6c27

                  SHA512

                  6d46063e0c8518c5dc0a8e827d2543d64edc3e20feb113d1de1ebf0c410a37f9ba9098eaefb01e88024bc8cd11c618ffdace2cc0724a2b4788b4dd233cbb8e80

                • C:\Program Files\Malwarebytes\Anti-Malware\MBAMShim.dll

                  Filesize

                  3.0MB

                  MD5

                  f44b6c80c46c4cf3071b5f5b916e1271

                  SHA1

                  839f2238ecbbfa80ebf9c1f77eafc78204b58761

                  SHA256

                  732523df43358729d5e85cceb557d69016dcdd3e2238d903c33c5327c3131fae

                  SHA512

                  99be164ae96bc4f93dc896d5df445ad1c2f023f10605a8c9857d7ebedfc5b070f50cd33b401d61003e601a06b8446e6c0b5dbddda4927a2e1352407d3b266942

                • C:\Program Files\Malwarebytes\Anti-Malware\MbamElam.cat

                  Filesize

                  10KB

                  MD5

                  60608328775d6acf03eaab38407e5b7c

                  SHA1

                  9f63644893517286753f63ad6d01bc8bfacf79b1

                  SHA256

                  3ed5a1668713ef80c2b5599b599f1434ad6648999f335cf69757ea3183c70c59

                  SHA512

                  9f65212121b8a5d1a0625c3baa14ef04a33b091d26f543324333e38dcdb903e02ccc4d009e22c2e85d2f61d954e0b994c2896e52f685003a6ef34758f8a650c7

                • C:\Program Files\Malwarebytes\Anti-Malware\MbamElam.inf

                  Filesize

                  2KB

                  MD5

                  c481ad4dd1d91860335787aa61177932

                  SHA1

                  81633414c5bf5832a8584fb0740bc09596b9b66d

                  SHA256

                  793626d240fd8eefc81b78a57c8dfe12ea247889b6f07918e9fd32a7411aa1c3

                  SHA512

                  d292e028936412f07264837d4a321ecfa2f5754d4048c8bcf774a0e076e535b361c411301558609d64c71c1ce9b19e6041efa44d201237a7010c553751e1e830

                • C:\Program Files\Malwarebytes\Anti-Malware\MbamElam.sys

                  Filesize

                  20KB

                  MD5

                  9e77c51e14fa9a323ee1635dc74ecc07

                  SHA1

                  a78bde0bd73260ce7af9cdc441af9db54d1637c2

                  SHA256

                  b5619d758ae6a65c1663f065e53e6b68a00511e7d7accb3e07ed94bfd0b1ede0

                  SHA512

                  a12ccf92bead694f5d3cba7ff7e731a2f862198efc338efc7f33a882fe0eb7499fb3fb533538d0a823e80631a7ca162962fbdfd78e401e3255672910b7140186

                • C:\Program Files\Malwarebytes\Anti-Malware\PoliciesControllerImpl.dll

                  Filesize

                  4.1MB

                  MD5

                  5471d57066b9c30fd2ded9353ef0cf85

                  SHA1

                  21d231c088ac7e983f0d620c3f172fa0fa373e3b

                  SHA256

                  1454ea0493b479bff5c3e27a7600d24f61d107451c05902cc6dff4abf86533f0

                  SHA512

                  1409a79e6b35253f3276425de518eb760623065c2c6290fffba3fa9b75675b7456b7cd535c54b7a4b9ca3cc5f5df9231727d2d531e9e824e7192c4e03ce23b83

                • C:\Program Files\Malwarebytes\Anti-Malware\ScanControllerImpl.dll

                  Filesize

                  5.7MB

                  MD5

                  1a9abeffcee60e21578515799d2cd03f

                  SHA1

                  7477221eefa163f36f5c82a5437dc2513a9b8033

                  SHA256

                  94fa98830adea98a635d03a7971039d72faa5c95fa5da484bdfd94d0519ad8ab

                  SHA512

                  8dfd426666fdbc31f6b74db10f98f79e17fbb88e5d313a5acb336d9f31c72a4eba1a46acfc800eab1a7d5dae7d1c62310c65dd0cf2a91fc1b72e90fe2a300717

                • C:\Program Files\Malwarebytes\Anti-Malware\ServiceConfig.json

                  Filesize

                  593B

                  MD5

                  599cb41680e184e97b87eb5b3eae901d

                  SHA1

                  6a3162a043806dba37c447ecb18b70ed6972ab33

                  SHA256

                  23486efbb2afbe8c5ea97233dad051b59651ae66a5e71bf2c41b47fa9197600b

                  SHA512

                  2d8d178de33d41cec7af6ff0434b753c2d0b74b6a7713f26d812408c7cb66b71647ea0e060fd195312019aaff8c160cc393a24dd7cfa88f8a4724093ecfe77bf

                • C:\Program Files\Malwarebytes\Anti-Malware\ServiceConfig.json

                  Filesize

                  593B

                  MD5

                  599cb41680e184e97b87eb5b3eae901d

                  SHA1

                  6a3162a043806dba37c447ecb18b70ed6972ab33

                  SHA256

                  23486efbb2afbe8c5ea97233dad051b59651ae66a5e71bf2c41b47fa9197600b

                  SHA512

                  2d8d178de33d41cec7af6ff0434b753c2d0b74b6a7713f26d812408c7cb66b71647ea0e060fd195312019aaff8c160cc393a24dd7cfa88f8a4724093ecfe77bf

                • C:\Program Files\Malwarebytes\Anti-Malware\ServiceConfig.json

                  Filesize

                  655B

                  MD5

                  2a32e070cec00952e2d96dd7152b7212

                  SHA1

                  1d5cdd43bc419bbd253ffce5fb4a1baed2134aad

                  SHA256

                  5d7497cb4ab8e274ff9083aeda2f94721f6d33b72a178b46170ecc90553f7e4f

                  SHA512

                  e420c5f1cfe42c9c31e4b4e401ac74a762c3c49818d932da9ef1851af1a0c0e204dd19afc9b3b3d25b28dd5b843a39f6b0bc4d8bf4b634dc155df241e2de4918

                • C:\Program Files\Malwarebytes\Anti-Malware\ServiceConfig.json.bak

                  Filesize

                  593B

                  MD5

                  599cb41680e184e97b87eb5b3eae901d

                  SHA1

                  6a3162a043806dba37c447ecb18b70ed6972ab33

                  SHA256

                  23486efbb2afbe8c5ea97233dad051b59651ae66a5e71bf2c41b47fa9197600b

                  SHA512

                  2d8d178de33d41cec7af6ff0434b753c2d0b74b6a7713f26d812408c7cb66b71647ea0e060fd195312019aaff8c160cc393a24dd7cfa88f8a4724093ecfe77bf

                • C:\Program Files\Malwarebytes\Anti-Malware\Swissarmy.dll

                  Filesize

                  4.0MB

                  MD5

                  3486801ce1e8ffc1bbc6d4f097b0f369

                  SHA1

                  08f2a85cd07cf1c0d6f27f0d5e7179c2a5cb8600

                  SHA256

                  26720d0b669898089a4ab5a6c53203918ec399d227331273ba11169bbe273678

                  SHA512

                  81974a79bf4e4086549874ef778e7716713a0107ccce212e9564f3355a26670943845aaba744691d2b68224e06e2f9d9a263e29f4ca7e46e1bfdb507a24656d5

                • C:\Program Files\Malwarebytes\Anti-Malware\SwissarmyShim.dll

                  Filesize

                  2.6MB

                  MD5

                  89a38afcfa758e3298609c6c51929593

                  SHA1

                  2df1ee30adc92bd995526e41fd9c823354de30b4

                  SHA256

                  4795576483af0c136a71dcee87a0ffb54f0869cae6395ac2ff8312bf555e7161

                  SHA512

                  cceaed0b9a7517aebd739a377c7bd8987b9ac357be2bf987dbae31d59f2121c5bb9a9bfa2c70a9a54ad65546ef23903176dd6328d93408cb5c991257d59e2717

                • C:\Program Files\Malwarebytes\Anti-Malware\TelemetryControllerImpl.dll

                  Filesize

                  5.3MB

                  MD5

                  374fb28ae370db522c18adb48a924d28

                  SHA1

                  bbe6edbdc19f222c2a07e8d9d04f45019d5c57f9

                  SHA256

                  36c799a972c91ddda2e758c82341534f89cc84d20e0083e44095cefafe286b5f

                  SHA512

                  08411d4139715f93856a4850158e27cf98858618923339d35bcb12304f6f30f6d2a0e911eb94beb65306018c12978dd6b164e2bc9039a61355bc81900dd2fddd

                • C:\Program Files\Malwarebytes\Anti-Malware\UpdateControllerImpl.dll

                  Filesize

                  4.4MB

                  MD5

                  c1242a30d1eb5efc086797c7b05dcca5

                  SHA1

                  a43a4e6df9673e3c9783bd9f1af66f3b79c7a1c2

                  SHA256

                  f556d2524500661fb8710aeac582b08763a75380faf8c6bceabb31abff89edbe

                  SHA512

                  89e2ed95e778a93846fa71db9b81d64c6f1075d731f8f7aec61e5c913f1887540ff9ae2cd42e4c0cae934089b960276e0e3ea80e886de06d0aaf4734c7fdf77b

                • C:\Program Files\Malwarebytes\Anti-Malware\ctlrvers.dat

                  Filesize

                  8B

                  MD5

                  f23d1d997bb73f4a3f00198250641872

                  SHA1

                  0b0fee904bffec18aa40570f0b026512d8cd07fe

                  SHA256

                  dbfb774da2ba0a6c908fdfb227cb73b16d016271baa4b072ff501ea430537728

                  SHA512

                  167462827ffa1620b7e987703b491b3be44a9ac7277ac14477eb81c3e068ce76dc5963ef119e3ec617a12db2753f375e96cb6d44110b90a730c2e1d84991b255

                • C:\Program Files\Malwarebytes\Anti-Malware\mb4uns.exe

                  Filesize

                  3.8MB

                  MD5

                  e8dd943b67fb14caf3f09d6762e25660

                  SHA1

                  0414f4cc1157559479b5f2c1d6f452eab14ca2c1

                  SHA256

                  683946520fefe89c98edf1fe3b8adf17ae48d0ba0a76782bec8537a6c9c6361e

                  SHA512

                  4fd53b35901612fe80d4ca223c99027bded437cd700a90f367234d21fe15690e6626c30525ed9beefb412729f9d8334d72e0a1625ab74596d463a19ca47c8645

                • C:\Program Files\Malwarebytes\Anti-Malware\mbam.exe

                  Filesize

                  23.2MB

                  MD5

                  afb49ea8c80452083426ee6c9ea2c165

                  SHA1

                  fae1c16efe38340d49dcdf4343175a4d1b60aaac

                  SHA256

                  32249b9c675c338f489495620acae41174e0d2840957e72d86ac32b10e989dd9

                  SHA512

                  3a66be4072b7260f95d9c7ddee72ceacb481b31a28eebcd60d802c131d0e4c8c183005a4d58cec485e4d73555b12af5cdbd425457d05ebd86a5f7ef856a67d44

                • C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll

                  Filesize

                  2.7MB

                  MD5

                  b7e5071b317550d93258f7e1e13e7b6f

                  SHA1

                  2d08d78a5c29cf724bc523530d1a9014642bbc60

                  SHA256

                  467de01d7cee7ec54166b80658ff22f9feebdb1c24eaf1629cf40e4124508064

                  SHA512

                  9c35293c95c1a9141740ac99315605964aa37c4a42d3a11cae9e5649ff1427a9480d3d5e7f763212cf13db3511c5ea3c84e68f95f0067fe6339a9d3fb7b27c54

                • C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll

                  Filesize

                  2.7MB

                  MD5

                  b7e5071b317550d93258f7e1e13e7b6f

                  SHA1

                  2d08d78a5c29cf724bc523530d1a9014642bbc60

                  SHA256

                  467de01d7cee7ec54166b80658ff22f9feebdb1c24eaf1629cf40e4124508064

                  SHA512

                  9c35293c95c1a9141740ac99315605964aa37c4a42d3a11cae9e5649ff1427a9480d3d5e7f763212cf13db3511c5ea3c84e68f95f0067fe6339a9d3fb7b27c54

                • C:\Program Files\Malwarebytes\Anti-Malware\offreg.dll

                  Filesize

                  114KB

                  MD5

                  16663d125398773a90d0a53333b7cf5e

                  SHA1

                  f92928ae3c9292588547ceaca1cb1d372bfd7936

                  SHA256

                  38e6811b47262101759aa51a631263d9e3eee5d211164318a751e078afec4cbc

                  SHA512

                  091764b8ad80aa31eea0bbd91ee505ebdea2654bc8aeaa3081a061d0d37ab13d27dd203075fd0de10c6687591aa0e36139a38af846c4e34e6aa67ab81dc277df

                • C:\Program Files\Malwarebytes\Anti-Malware\offreg.dll

                  Filesize

                  114KB

                  MD5

                  16663d125398773a90d0a53333b7cf5e

                  SHA1

                  f92928ae3c9292588547ceaca1cb1d372bfd7936

                  SHA256

                  38e6811b47262101759aa51a631263d9e3eee5d211164318a751e078afec4cbc

                  SHA512

                  091764b8ad80aa31eea0bbd91ee505ebdea2654bc8aeaa3081a061d0d37ab13d27dd203075fd0de10c6687591aa0e36139a38af846c4e34e6aa67ab81dc277df

                • C:\Program Files\Malwarebytes\Anti-Malware\sdk\MBAMSwissArmy.sys

                  Filesize

                  233KB

                  MD5

                  1dc6d344ee9b6b024ba23278891db9a5

                  SHA1

                  519b792d11daa2bf9d127f69cdd603a236576e04

                  SHA256

                  823e1c7321e177b006c1f3fd1ec8b99607a12d2c3c321f3a6cbbcf7030b6c240

                  SHA512

                  fb96c4ede03c3aa729d2ea5a72c5f14029f6d69a79b6e0d5449e371bf3acdbbd1cb2079e8bbac3a3140a257c71018bc7a2a31a45ad5c8b65382e67cc3431ab6a

                • C:\Program Files\Malwarebytes\Anti-Malware\sdk\farflt.sys

                  Filesize

                  194KB

                  MD5

                  6b187634792ceb280735d542946f226e

                  SHA1

                  1eb53044e5e477cd2e3de1571a3a8920bb36567e

                  SHA256

                  4a9cc386803f32da7f0cd97cbf0b7712adcd9196f036eca505c00f05dfe7f622

                  SHA512

                  4b7d4146452e6c17191f0a490419969c204e52d8c43769c8871b5b95e053e7b766717ee7ef3334eac7cd7ab1a11263690af9eef0fc41fe824746dd2f7c4485a6

                • C:\Program Files\Malwarebytes\Anti-Malware\sdk\mbamchameleon.cat

                  Filesize

                  10KB

                  MD5

                  dfe383b7b48853f4c3dd383fa40de764

                  SHA1

                  68066a7ca36ec32699e645fed7bdb33be1e2b395

                  SHA256

                  552a30fb8aa05793a5c78028c3e1ff9658b1a7c831c5b60a5c74a10f0f1127a0

                  SHA512

                  21bea8f59bb7f02a52e16b5404ed522b6d1a8854f7ca6c9d34031bb02ccef11b0f1a53e36fb7031ff943add4028195d92de0732856465b1ae3498e1e1e50daa7

                • C:\Program Files\Malwarebytes\Anti-Malware\sdk\mbamchameleon.inf

                  Filesize

                  3KB

                  MD5

                  e5bb98e4d7adf79cf7355aeb4a12d3c4

                  SHA1

                  c2996909b98b95863d54c6a2f7843e5c05015596

                  SHA256

                  1f2ec66c3947802dd97abead84d71bacebf84e4a2e871852cf5291958d45a189

                  SHA512

                  f65ec684a21481c66f4571fec4f5cd17fb629fbc4b5fda88bfe00ada30573f3c74313311f5e8a164709824b8033a60fa2ae0f1643d0ee3ba8ae4fd558709aa7f

                • C:\Program Files\Malwarebytes\Anti-Malware\sdk\mbamchameleon.sys

                  Filesize

                  217KB

                  MD5

                  6a21162e1c8a9f65787b14bc439eb077

                  SHA1

                  1bf68b253edd6cae098144e24e09b4e22178784f

                  SHA256

                  8b7990e1c676f53918e41f6b18b20179d77e598352d9243b05e2ea22b2d9e4fe

                  SHA512

                  a0dafe66479b9e68ebf04a7e2fa7c7cc352fb075356b7eccebee7af527393711e3cb36c7ff6466a5e28b17d1d003c1c49ef176b448f5de36a7c8177c9c8808c4

                • C:\Program Files\Malwarebytes\Anti-Malware\sdk\mwac.sys

                  Filesize

                  177KB

                  MD5

                  2152a9aba3407e2cfcaa84e4c20423a2

                  SHA1

                  825e79fe98922ac978aee92e243aec0ab44ddd91

                  SHA256

                  a7d456c7679717500c4a8968a9ea205107dd6e72c81ba1435777af2bd3bd95d3

                  SHA512

                  32c1d5f1ba553848213353a2f39b9971c7ac6818390b1a00d6b23335be8f542665d4ed60202e7ca04a1976141881515833665782cdfa8f69fcb3ef0abfd4f37a

                • C:\Program Files\Malwarebytes\Anti-Malware\srvversion.dat

                  Filesize

                  10B

                  MD5

                  f33742967e3940a2cf564dd4730d84ae

                  SHA1

                  fe914bdc2885bd3c09abd7811c0ffcec6574827d

                  SHA256

                  39262a64764a8a6e45a65810b8178905e31c50756db299258abaaedd6a28f157

                  SHA512

                  10205f3291c79b6e1901333cc4a9491168b3cd65a14ae7fd7abec2cb9bbbcdeb3617e240d45d16bb252cc11402e6938cd50f7f0e19ac08b67a5bec01b045ec9f

                • C:\Program Files\Malwarebytes\Anti-Malware\uipkgver.dat

                  Filesize

                  6B

                  MD5

                  74c6677020fc6b6c867aab117078bf5f

                  SHA1

                  8c46db37dc0b39eb963d4144539c8b591e122400

                  SHA256

                  cdbb9bc874d71e154c71b68b1fe959913d286036dac11e226e5620c919ba9708

                  SHA512

                  3f9db8d9bb25322f8d8e750750bf92dbe6ac63d686eced65cddfcd61178cf0e947118a491058414d4d2cbb4892e39815565669aee0dfdda23aece72d278292d0

                • C:\Program Files\Malwarebytes\Anti-Malware\version.dat

                  Filesize

                  47B

                  MD5

                  283bd24fd1ae55b5b87752c7bf2d09da

                  SHA1

                  dc78595e9b26b76582359418e41d56c7aa679411

                  SHA256

                  b52330abda1e62bed1b65f6afc5507062f6360f6d37b56781bd982bf6a865d33

                  SHA512

                  0fa4116faeb8506ad1b8f9917ed12f0c167bcc36b5e1aa44934bb68a3aa362934968ad72c65ab249947b1477cb0c645d284c1b06fdeafd82d4063f189ab8d61c

                • C:\ProgramData\Malwarebytes\MBAMService\config\AeConfig.json

                  Filesize

                  47KB

                  MD5

                  6268be3ccc5dedb93d76bea3317dae5a

                  SHA1

                  6db906dad34eca2165eca9fbfc67edb9f77e3843

                  SHA256

                  1e1fdac597571cf63f633dc1f0c3ce29888cf4d4d58684cf91eb9b1eb28f9cc7

                  SHA512

                  f3533c85be65cfecb0474ce82f7ee6738922274aa075e67da7605884393a04d20d45ddec9ac5b53dd0924a6e429827675b0b1c40c6ff8b6268cbd67e1b2a597f

                • C:\ProgramData\Malwarebytes\MBAMService\config\AeConfig.json

                  Filesize

                  64KB

                  MD5

                  f78f61f3b42eb21634188ff756a6c229

                  SHA1

                  53858de6170262781d74c023e7300de137aaedd9

                  SHA256

                  9fd647255e6af07564229c08ab08fff1bd45f12b98c3dc98e9a0589809ea288b

                  SHA512

                  d39c4e41139fe6ccb9cbc95308071b0e104059fe0e3f9d45add2400d17260bc26b062c19fcfc22e74c84ba49999d942cd6194bc63efea7f765892e5f1f800075

                • C:\ProgramData\Malwarebytes\MBAMService\config\AeConfig.json

                  Filesize

                  64KB

                  MD5

                  e1db3f15a29e7645d347dba0c2348a60

                  SHA1

                  9ebce91ee0f70788ccf2146bbcbbf58bad9601e6

                  SHA256

                  9d83185c26448cf677b6734fe5ec5453a722b0b7e8640a01a540a726f9b0858a

                  SHA512

                  ccc071f9a46315196ea6e83e7c290f7a93dfc582057cdf181f3d356aaa382828532ac797f14bc8917771cd487b3bc58300e4f2e3259b67713f4cb678e3b2b49f

                • C:\ProgramData\Malwarebytes\MBAMService\config\AeConfig.json

                  Filesize

                  86KB

                  MD5

                  f15e9f69c7849f3e0e1c959465ad4ce3

                  SHA1

                  b3c867571463e54dea832fa442c0304c0755fd66

                  SHA256

                  8ed2c09ecd5fcecf3d6eed3f4715e6952336edf0772d742d7548f27eafcf2e5a

                  SHA512

                  ff19abfa7e9374c71f854a2d50b03288c7a342dea3fbab235cecc215c21c0c21169fb5df02a7f3a416dcf51e85aac647d02eb3bfa75c405092545cb9a02b167b

                • C:\ProgramData\Malwarebytes\MBAMService\config\ArwControllerConfig.json

                  Filesize

                  607B

                  MD5

                  881703ecdee33f80226bf5d1bde03404

                  SHA1

                  7440f2dd50ccc256f7da6f719395f8e84894dd53

                  SHA256

                  861569e7c86ca690d84ea368c163dd598d39722c99d2a07bed908c4abdeac49d

                  SHA512

                  44af265f9d713232b4978fda2f0b9f05a9f7e43c6fb217c41da7870c15a83786a858e3802ec00ff8b4d5b645b04746f5867c0504b55d712da4d589c89fbae66b

                • C:\ProgramData\Malwarebytes\MBAMService\config\ArwControllerConfig.json

                  Filesize

                  608B

                  MD5

                  72cd7d18c4d7a4154174cfa62b56c0e4

                  SHA1

                  07edbcf8df177ead80ae8ccb8c0bfc29941a9a46

                  SHA256

                  dc275ba6776c0d240992bcc4afde8e548c18529a8fd946b0856f9a1e66d82c2f

                  SHA512

                  e9d8deaf53771ed90e37dee08928ff52ffde066ff62e743191fa3a11d49c67c60e2132887fe6472c4190595fca40433e85514fe0efb4c31c25bd8416fc0f6c13

                • C:\ProgramData\Malwarebytes\MBAMService\config\CleanControllerConfig.json

                  Filesize

                  847B

                  MD5

                  0efa856d1509b302808220e7158425d9

                  SHA1

                  4be220a73bae3d6ef09111d1a366813a786d83b4

                  SHA256

                  cd7fa6af153ade2afaf37c4cb0e1e2b857df2d8a1b616bdd6375840862a2b2f5

                  SHA512

                  df0eede4ec4bdbc9aa267c7f32fc65ff0f34fad0745a8a04241ee9b5a7c584909ed7a71b9163179576712bf4386e49214ea10ca190b3b8432ae1e02a4f4a9f9e

                • C:\ProgramData\Malwarebytes\MBAMService\config\CleanControllerConfig.json

                  Filesize

                  846B

                  MD5

                  0919a815eed971a8190fc28ccfff01fa

                  SHA1

                  01998b5386371db34f8e75a97813698e44f3f686

                  SHA256

                  d4f59fb7f7247bd90386e8db442393819c16c4b1fb9cecbc16062fb98ef67e19

                  SHA512

                  00f72e1923a4176b366818330e269dbe3e59c642e944d480dd8844b03b4d2f9f8363a1d17662f4a0935f8ead849aaf3b4103a9bfc1965b7943586aa4f949666c

                • C:\ProgramData\Malwarebytes\MBAMService\config\CloudConfig.json

                  Filesize

                  791B

                  MD5

                  fdebdb47887576e059f42e857f7fdd23

                  SHA1

                  efb21692068b00f40ac03d3df41e1090fa2c85f4

                  SHA256

                  01f7b51a3768e5252d2ae37ad1f4c6e3a402ce298de45c371f50d8cac48d80f1

                  SHA512

                  ca63f976fa9ef0afcf4e1387ca2f093c63d17d7af726181a5d493f2ded57b415ce6f6261fc38d1ea547261f329a46fb79b948c4729bcd64fa0e4da5d64d61074

                • C:\ProgramData\Malwarebytes\MBAMService\config\LicenseConfig.json

                  Filesize

                  9KB

                  MD5

                  a9a17f653cc2209174a59e587300124a

                  SHA1

                  feaeccc6a30ad6d70995e178da4d754fca715a9b

                  SHA256

                  b4fccf7ad172809e821de13a88eef85a17eed36ec100bfc13aa3a9823ad9583b

                  SHA512

                  58c440691b26453c443c246f8bf5efabd98209a3d000bdecaade9b0091ed8c527cd71e320319725568d767ced4e1073dab564d79ab267b9517f00aaf1f846497

                • C:\ProgramData\Malwarebytes\MBAMService\config\LicenseConfig.json

                  Filesize

                  10KB

                  MD5

                  7c12aca6e99ad40ed901481500fa8f32

                  SHA1

                  16d701eaa3e20efcbec5dbd1f6efe7fc614378b6

                  SHA256

                  53bce65b078583deb8cdc795d3b5d62d84620ac4471ca73bfbf0875a99c3a26f

                  SHA512

                  f72c11eeac7dbf3bf00f68bb6b51b58eb17547fed432bf75e7eece0acc56502bf63e2e2eb2d03ff7870b26bfffede788260a08092618a1d471f8a724213102bd

                • C:\ProgramData\Malwarebytes\MBAMService\config\LicenseConfig.json

                  Filesize

                  10KB

                  MD5

                  813f13e40d583b103ce77baef8d89e5c

                  SHA1

                  7e80d5f8388984667d5cdb4b0c6f527517311669

                  SHA256

                  d87fd2422ba568a402d572480dd91e14b74b687d30fbb5124ee0cf8e7d23429b

                  SHA512

                  178ff53940654175930f8693c59bd30d9bda591c86daf4faff49eb6d980a9e4c7add3bd7a662bfe3cfa0dad9b4ace303be5b283f461cf98c0e89f015a2ea5124

                • C:\ProgramData\Malwarebytes\MBAMService\config\LicenseConfig.json

                  Filesize

                  10KB

                  MD5

                  ab8c7920ee39fdee404820c119b67945

                  SHA1

                  9404806c5b9bdf47fa43a4c94aeeb3a4c84ca6f1

                  SHA256

                  078ef2f79423c17429e467f914b85c27604a0688cabb2e0f40266ff184d8d859

                  SHA512

                  0557d0dbf361a03c2e909bacc62ff7cf42754d427db5b59df4176543a06fb3a9055f6f5cc622d1cceca19c3dea5d90f37eb72575f1e8fcdba92984edafde3006

                • C:\ProgramData\Malwarebytes\MBAMService\config\LicenseConfig.json

                  Filesize

                  10KB

                  MD5

                  fe58ec460e56f77e85a61782996ab8c4

                  SHA1

                  7cc72bd861652a909ce6e0bd7b4a02affa25e73c

                  SHA256

                  d808504b1c951aa5a9d84f67a6a391ac305907b18cc3806b074bada9abd60472

                  SHA512

                  22f89317e3c8559f5a1b8f781833ac55486202ffc7945f1f01f55b819c255b551e542985bb6a1fae07b6f0143040d03587081a66757743d17481e45f654a47ed

                • C:\ProgramData\Malwarebytes\MBAMService\config\MbamClientConfig.json

                  Filesize

                  1KB

                  MD5

                  c1f23d8f8e72cb49d06aaa1cab71a88b

                  SHA1

                  c2c1a26ad200d299c5b9a71f562bb9190348befc

                  SHA256

                  16c03b9a66b9b6bb3c5fc663a15fdb9b4c4823b3e29f6e9a1a35bac01ab23317

                  SHA512

                  70260a05119fe822bcad1847c178aaa462b4ce46dfc3fc2b7c9df6a0d1c6726be4c7ba5c470252a343740fa9ac85f329e70a273fcb7988e9cbd2a33e3ef5eb06

                • C:\ProgramData\Malwarebytes\MBAMService\config\MbamClientConfig.json

                  Filesize

                  13KB

                  MD5

                  729286ad84c1a9e4250c5bd1d010ca05

                  SHA1

                  bc8e20ce36d830f9b12ec304034c1919439849de

                  SHA256

                  6367f2d11112a55c4e23b84b6a224ac8fc290195e03a1abcc79475a4bac50347

                  SHA512

                  a4f337928ad2289c605eed5874d47e617cd4bc8e0330434bac6737a6c9531f976edcdcc6e6661df455b43ad3022d4cb5fdc0901f7ec15b6393af980437984e0b

                • C:\ProgramData\Malwarebytes\MBAMService\config\MbamClientConfig.json

                  Filesize

                  13KB

                  MD5

                  1b6a1c37eef5ebbb145974e1116cd1c8

                  SHA1

                  6d46979e26731fcc9d41893ca019c21f34d04efa

                  SHA256

                  746ce7fe7e8ab5cb5364c0c002cbbe024c0ed3e31ea78ab1ef9701185717644a

                  SHA512

                  7f5a76beb84ee247963da8a1092900a6f4272a8c0dbc91dc9ba2b17cdb5aad297aa9c02a74b8f09f90f4466f445366bcd1d5d54712966218f270696ea569b9fe

                • C:\ProgramData\Malwarebytes\MBAMService\config\MwacControllerConfig.json

                  Filesize

                  1KB

                  MD5

                  c25af6cebd4d4e2722d39704eec1b724

                  SHA1

                  f14d1552df7c5331b3b51f00bfa915b607eb2710

                  SHA256

                  e0592d3403f48bd1e60b1c47a07fa7c6d58b9cad2c62ab28d531581d285d6896

                  SHA512

                  64c872af3f699c9884e3c2649ba9aa3111889d4e6c0a764a482a48a64a912851b746910ff207efe5abb49eba0e7902eab9d8d236f7005268e9e42f2a3a0fa8ab

                • C:\ProgramData\Malwarebytes\MBAMService\config\MwacControllerConfig.json

                  Filesize

                  2KB

                  MD5

                  84a58d3159506e36c19c395d4475a823

                  SHA1

                  7ab523e5c4aaf8010da8513bc8da40f1e547ced2

                  SHA256

                  3ca3ca46a1906214ec7efe8d33987410e37ecda867791f51115ef2a0f765e211

                  SHA512

                  b32b68fd5d44a639e610c74b600aa8ac4d64ad65f4a5fb398f5e674e9e161a6afbfa0ab99e3e4e629ced09b34498d619092257b89ff16f1db9b60a7bebb36ca0

                • C:\ProgramData\Malwarebytes\MBAMService\config\PoliciesConfig.json

                  Filesize

                  814B

                  MD5

                  283d2c9f54c0e0ee382f9746c986c7b9

                  SHA1

                  be17e61b0ecb4d2c17cd51cb397fbb308e155f72

                  SHA256

                  b7c5768f36320b70a83c51f30c65943a9f16bea30d7dcca79259daa6182ae47c

                  SHA512

                  7f91a8ab077938f576021d45811dc5834f358cfa4bc918b8bef5695716feedd10889cad2ba6faec51b6890e2be3d57c265b6c448b0e4a88628a9491bd7255a74

                • C:\ProgramData\Malwarebytes\MBAMService\config\RtpConfig.json

                  Filesize

                  1KB

                  MD5

                  5ce78ffc19da2c5174498f6c024bc938

                  SHA1

                  aed705524b1496fe42307b6669c504e81c826ea4

                  SHA256

                  39cf7aa126b744a7a355693cf64a482fb5595d18df08832c2df5a6233d189ed9

                  SHA512

                  c760e4f88b4d1978932f399783e752aeac47873553cd83469811c478d60472cd05ace39407486d0206c221068aef140e98b3c60eafde5defc3264e30ec02522f

                • C:\ProgramData\Malwarebytes\MBAMService\config\RtpConfig.json

                  Filesize

                  1KB

                  MD5

                  7adfbbd6c063cdc64e6a9e14b1897cde

                  SHA1

                  c394ff01c7ec867d0c5fa77408905e4f81f3b3a8

                  SHA256

                  1e6c52cfaad6fe1f28a101edd17f11da00744aec25c1a0a33213e4cd60e678f2

                  SHA512

                  17762bbd30dab814b997434d06c6ccb0f99d0ff20854ba9bcd5e14382956beebfc46b038b073bad95e54450e299b3e3d9239a909e14c89a06d0c48da8ceaae4d

                • C:\ProgramData\Malwarebytes\MBAMService\config\ScanConfig.json

                  Filesize

                  4KB

                  MD5

                  1191187887ffb64e146573141e45310d

                  SHA1

                  878ad1dc874a90c62eafab1b621a19b1d3ce60dc

                  SHA256

                  63895902d28b9e26f9ae1d0bb0a6568aa75e5f0a203894853ba47ec6ace58ab0

                  SHA512

                  22d8c06474f3b182c6fcf8c9b04a4c67ba2c7721f3f6aff2cc0149bd9293a688c2dda29f0497b7ef8f14c7a1c81312d4a5c81f6cddc4cfc8349388b9a1d0e6f7

                • C:\ProgramData\Malwarebytes\MBAMService\config\ScanConfig.json

                  Filesize

                  7KB

                  MD5

                  30a0ddad4c4a9c3d2a180c006e1d921e

                  SHA1

                  c7229eeb5f51ea4643d65ddf693257369c1de23d

                  SHA256

                  27acb23a913970c6005cd3be77f39c4d94d3ed0cbccfc133db749e902134f3d7

                  SHA512

                  be0e3271050d411e9b3fdce1b56a1c495e677f218ca3b4a27d146762b21c05fbf00dc26fc8381f8d6847da38562516b1f00a32748a2ce1d39d190327284f4c1a

                • C:\ProgramData\Malwarebytes\MBAMService\config\ScanConfig.json.bak

                  Filesize

                  4KB

                  MD5

                  2209cd3519cc3be48d64547711c3f903

                  SHA1

                  7931dbedc954e52a53a8e4bac06ecd0ef9734cf1

                  SHA256

                  703ab169526c33fa96be1aed07b1b052f41f0e576234dcca17a345eb6803c545

                  SHA512

                  efff5371128e63bb58937102e579eefb4edf0b509fc7e735530cfdf381f39195b0d8f19f64544e3df62d84af0768a551b4526cc33fe7503a664faae5447862be

                • C:\ProgramData\Malwarebytes\MBAMService\config\SpConfigFile.json

                  Filesize

                  10KB

                  MD5

                  80db55c8e8becf46b89495391e7a73df

                  SHA1

                  89986542bafe847c925dc0c43a73f505a2a8046d

                  SHA256

                  ddde601c2f7f5ba4096b2616328086e6f14ca7de7ba762bf13d6caa302171dbd

                  SHA512

                  b813e691230e4d2852b9e0b0cf5ebbd87dc6055d88bb89c0abebca564d94f4132ed81be21b7f8158d5a01989bff0b24db10aff59c35f722d0632ba99a5fada85

                • C:\ProgramData\Malwarebytes\MBAMService\config\SpConfigFile.json

                  Filesize

                  10KB

                  MD5

                  ba1febaca4244326779e0c44602587a8

                  SHA1

                  00216d6896731a3e7b6131055ac8736fd0b3cf1d

                  SHA256

                  8b20c9a77b8408a095c3b7d759ee6507dbd6995d7ad2a8b23e49426c833c6e42

                  SHA512

                  76c75f20a279496512a9bd17d3d9b6d444de517fdf0266420fe8f0002e2b762ff5bbd9ac6cc0569d820b19033de1c344809432680ea510178b3ad098e3cb8833

                • C:\ProgramData\Malwarebytes\MBAMService\config\TelemCtrlConfig.json

                  Filesize

                  1KB

                  MD5

                  87a0aa839ae8e930fc3c1254ee76142c

                  SHA1

                  e87857860e9977bb5e777ef334f03ace6370b867

                  SHA256

                  5ea7aeba12aa537dd1d22474d67f1038796147d0a9cd7bcadc441995c2aca6fc

                  SHA512

                  c4e734d1267e115c70bc8252aaac2478d6e1a6952e4ec77c3bbdf9ff6bad544455665bb684faf29ecd79d57590e75a99481fb23a259f4cd966fe85b0056a91e6

                • C:\ProgramData\Malwarebytes\MBAMService\config\TelemCtrlConfig.json

                  Filesize

                  1KB

                  MD5

                  9928fcbfe3731b8d4d303d22fe08ed50

                  SHA1

                  fdc851878a9221927714da33e33446d47aa60407

                  SHA256

                  f4101d612ae00fc5409fc3e6accb860d66c88dce2bbf412368c5dd8339d44f9f

                  SHA512

                  c454c6dc2048362b498e900f6b1c3d708cb40038a656ee1651af3bef507b68bccc7828566e42448d8e962ef297df3da09034723b61c9727615d34adb7ed752d7

                • C:\ProgramData\Malwarebytes\MBAMService\config\TelemCtrlConfig.json

                  Filesize

                  1KB

                  MD5

                  87bf0d225b17592bd0f91bca91c0880b

                  SHA1

                  5da20f80cd8321bdaa84c9c3484dffa899c95c2c

                  SHA256

                  2ba4a18a9d717e6f67c5c1bed06f70dd379880cb82144df795d670e084d65264

                  SHA512

                  8addc636f79172ba9796f2708c2eb9120ccb95dc86644afac083f5aff3cf12fd5aa89de2811f7fa6494bdcdc9a6a07d306cfe6180e3fd226623640d5f04cd14b

                • C:\ProgramData\Malwarebytes\MBAMService\config\TelemCtrlConfig.json.bak

                  Filesize

                  1KB

                  MD5

                  155d078fd5fffc6b169363e768c17a65

                  SHA1

                  40f3d38ca6d85f06ce25ef6827808d37aa070378

                  SHA256

                  212b66cc84c0e99b44c0e363732ce695e8c48eeb40c352ce57255dda743bf0f0

                  SHA512

                  5683b4b4570b9bc9e3c537df3b2ccae9c25b14935c68b1aaf28c40005a84b5aa607b7723d1dd02e55f5c32a56a5f93789f942f5c71f6a17759a8e67176ceafc6

                • C:\ProgramData\Malwarebytes\MBAMService\config\TelemCtrlConfig.json.bak

                  Filesize

                  1KB

                  MD5

                  0198b0ff5f1943c39b4cd2a2725334d8

                  SHA1

                  c2c65d6f118e5477a2c8ee1619489b9e6d5cd7df

                  SHA256

                  11366bc1e37cc3df665a2e6077eaf26f1f6b11df3c81a2224182215fb42fcf41

                  SHA512

                  33ac5d9c13c7acd3cb1b4dd40a767876c1702f7207b80549ac6d820a007c17ed439f148543e432ee663b2a3ac5ce77ad317e4178255b66dea24fd5070f98d146

                • C:\ProgramData\Malwarebytes\MBAMService\config\UpdateControllerConfig.json

                  Filesize

                  1KB

                  MD5

                  6010581872ac630392da5b6a46b6cb45

                  SHA1

                  542fabf7b4434d708f45331a0a15e4c6690d7de2

                  SHA256

                  56cc4f14baf58519f945331fd38a4eeaee05b647ea9cead090d14a11c07c3b03

                  SHA512

                  2b393f43f40536fc52679359a2b1b0b539435c9906017f719e9c92af58661dcc7b65f6ed3e894d47b85bf8db40b80a69cffc4cc3c11e036e7aafd3412016685e

                • C:\ProgramData\Malwarebytes\MBAMService\config\UpdateControllerConfig.json

                  Filesize

                  1KB

                  MD5

                  d395b8a4ee5d7e7db94e857d68472d68

                  SHA1

                  e1e249636968877d2b2d0470823a9a6ab03bc6c5

                  SHA256

                  c2846d6020b4b1084be816037f885c73df837d5bd4a300a4c0ebbf50bfc953f5

                  SHA512

                  e8961697e7f4ba6592d08986de87c0eff5b8843ed83ae7602648a6af4642c71480c93668f7087276999423386d9f6a45393bb99e6b2f1207e596dd090411ae54

                • C:\ProgramData\Malwarebytes\MBAMService\config\UpdateControllerConfig.json

                  Filesize

                  1KB

                  MD5

                  d395b8a4ee5d7e7db94e857d68472d68

                  SHA1

                  e1e249636968877d2b2d0470823a9a6ab03bc6c5

                  SHA256

                  c2846d6020b4b1084be816037f885c73df837d5bd4a300a4c0ebbf50bfc953f5

                  SHA512

                  e8961697e7f4ba6592d08986de87c0eff5b8843ed83ae7602648a6af4642c71480c93668f7087276999423386d9f6a45393bb99e6b2f1207e596dd090411ae54

                • C:\ProgramData\Malwarebytes\MBAMService\config\UpdateControllerConfig.json

                  Filesize

                  1KB

                  MD5

                  aad75c7801d17a58f78999e9c8609247

                  SHA1

                  91414e8d27648fc8793b39db6ee1860f07adbf6c

                  SHA256

                  f9639bef6eb376b100f8941221b216d7951ee098184330d9cc28bb50d336380b

                  SHA512

                  6bf962d02d6d62283897772472550d0997f8ea83560965d2ba7cd001052f073049e25103efb36a4cba9d3a9710e9da0863103374c5d26db484d0f300486d107c

                • C:\ProgramData\Malwarebytes\MBAMService\config\UpdateControllerConfig.json

                  Filesize

                  1KB

                  MD5

                  aeb90e0795cdc64eafa2d042e90e9034

                  SHA1

                  f85d53011e873e9d9ad968983daf61963a215007

                  SHA256

                  82e13f4faf0a8519ea33b12c702e98d76b717358805c77620a0888dc41a48259

                  SHA512

                  01890de36c0744828fd8600d70df2ee278a7241f24547acc42cf2418cefc3caeb9b0a22d1c258de99f683845710130cba948ef262b3729b84e144391aff662a7

                • C:\ProgramData\Malwarebytes\MBAMService\lkg_db\Actions.dll

                  Filesize

                  5.0MB

                  MD5

                  1eff53d95ecaf6bbfffe80d866d8e1dd

                  SHA1

                  d7ef7d7c77fd04b2c0eb8c16bb3cd08057f6742f

                  SHA256

                  6dd748f7ca56125cbe158fa3612f08e7312ef58ad5375e6b7ab5532cc16ca0ac

                  SHA512

                  c59b8e6f0b238a247e64b9c7bb42213dadac1dada63542830a6292361174c935c0c662b2d1aed3fb6100cc4993297b1eaf25e328f2b4613458c4ffca63b9f02d

                • C:\ProgramData\Malwarebytes\MBAMService\lkg_db\BrowserSDKDLL.dll

                  Filesize

                  5.8MB

                  MD5

                  1ed53171d00f440f29a12f9beb84dac4

                  SHA1

                  4d9a1e3579b0999f1ab2fa818b588411e9ee920c

                  SHA256

                  e659e687a872050f9e65d78992d16bd9b393cf3f8e8c94e0e15fb42b7065327e

                  SHA512

                  17161cfc672d1b996b8af4ebac17f9a8a3807f38c9a23e2e5b4dadcd9a21c3a64faec9bf59147022a9df88b80f89300f1b537091289bd7a42806bd206a317e6e

                • C:\ProgramData\Malwarebytes\MBAMService\lkg_db\Global.nm

                  Filesize

                  336KB

                  MD5

                  272049844fc5c5d283951e83a5e8aae4

                  SHA1

                  50d8e160f7793cc97f2f14a05de10c6d345efb49

                  SHA256

                  b6809cf37379b32b3893d6ec0a689428ea75c835021226dc0d4574b42aba2e5e

                  SHA512

                  ad24b671da5b83be226c6b681e2037ad6ebf7c6524aa752a6ae4fe815eb25be142ce2df905252831f3a76e9c0378b60072fce02f4c26bfd4d53830f60a08c161

                • C:\ProgramData\Malwarebytes\MBAMService\lkg_db\Global.sr

                  Filesize

                  17.6MB

                  MD5

                  d4ac73ac638b262ae982d97415611ca1

                  SHA1

                  1a074815ecd927f55fad11d415c61954443afe55

                  SHA256

                  103357ad0b9adb971b64a82d088de75f080446636ea477327b56e004687407da

                  SHA512

                  5e5accbbe3ef2edb2300a9f4dc4dd67d7ea2e2a20b8ffd26ce4381d1b7bc630764984366fc720068bd462003f2820ec2c2307a756f3731b509ad55011431942e

                • C:\ProgramData\Malwarebytes\MBAMService\lkg_db\MBAMCore.dll

                  Filesize

                  6.4MB

                  MD5

                  b2216df400c3ef59f9406831ba7956b5

                  SHA1

                  1e26588190fc8a608e773239d498ceb79a92fca3

                  SHA256

                  1e429ee1da8a0fe6569673b7052c5f49c193aaa8f3152451f645539a431b792d

                  SHA512

                  3aa3c9ed3bcaa0f2b7c4de36f7a83e35e8abf63c972c8e5377915bed41a803ae516cf8ef14e9c455043dd1ae46e4aec1820fa3572e65d0c87a99eac1d43d1f40

                • C:\ProgramData\Malwarebytes\MBAMService\lkg_db\cfg.bin

                  Filesize

                  661B

                  MD5

                  8fd13803b1e5f14b4d241facc601a170

                  SHA1

                  7321eec794bc766d84d75bd0370a9f2e4d7abdf6

                  SHA256

                  925d771b2643715b62ef720801dfa96047fff1ee70eabb244bed802234673717

                  SHA512

                  f5b3514258487f8576fe32a795eefcffef049c7d002a6abdca17383bba838c7a218be23ec6803dcefed615f40afc2ba4b15bf65c9a74c4f6bb891d15d02bfc22

                • C:\ProgramData\Malwarebytes\MBAMService\lkg_db\clean.mbdb

                  Filesize

                  10KB

                  MD5

                  6f9b49be0223ac79a713fb1472f890bd

                  SHA1

                  6d89aea5a4823556b005a381b9334acb68a01210

                  SHA256

                  33a14b9ff0c92254945b0495a822611a0170daf4c0ce0dc4203a181c678dbb78

                  SHA512

                  7b8df6420fd719fccbe1c4a7874514362ca06e20cd12dc3f788ebaaa3150e301d0e975b50bb52d1bf99f7f835b1ebf45fadc53fe7be9fdf74777ff90c1ffd95f

                • C:\ProgramData\Malwarebytes\MBAMService\lkg_db\dbmanifest2.dat

                  Filesize

                  924B

                  MD5

                  68fe113571e46200ead41766ddeb4e4f

                  SHA1

                  0da4095f06e6406ce8b27a90a54d129dc2aa87ec

                  SHA256

                  a8ab8b7fd0c3b3478a97a6e17f96062e7c823b0f4bbfa11f6f29fc5dcfc1ffe9

                  SHA512

                  099b3250b1bec83a1a3fd58b980e22a93d57bece0fbdd7c785486495344ae524e5507148a6600244168c5d995768cfd7d64700dbf43abe056186890464bc13cb

                • C:\ProgramData\Malwarebytes\MBAMService\lkg_db\dynconfig.dat

                  Filesize

                  39KB

                  MD5

                  10f23e7c8c791b91c86cd966d67b7bc7

                  SHA1

                  3f596093b2bc33f7a2554818f8e41adbbd101961

                  SHA256

                  008254ca1f4d6415da89d01a4292911de6135b42833156720a841a22685765dc

                  SHA512

                  2d1b21371ada038323be412945994d030ee8a9007db072484724616c8597c6998a560bc28886ebf89e2c8919fb70d76c98338d88832351823027491c98d48118

                • C:\ProgramData\Malwarebytes\MBAMService\lkg_db\exclusions.txt

                  Filesize

                  23KB

                  MD5

                  aef4eca7ee01bb1a146751c4d0510d2d

                  SHA1

                  5cf2273da41147126e5e1eabd3182f19304eea25

                  SHA256

                  9e87e4c9da3337c63b7f0e6ed0eb71696121c74e18a5da577215e18097715e2f

                  SHA512

                  d31d21e37b0048050b19600f8904354cff3f3ec8291c5a7a54267e14af9fb88dfb6d11e74a037cc0369ade8a8fb9b753861f3b3fb2219563e8ec359f66c042db

                • C:\ProgramData\Malwarebytes\MBAMService\lkg_db\ig.exe

                  Filesize

                  1.8MB

                  MD5

                  14cd82fe89752e3723a9b42aaa68763a

                  SHA1

                  ea407d8d7064581406eb1b14e0f01cee61afb252

                  SHA256

                  60e6029bdf3a2d88772bd4ec3aea6b688505e7dfcb76ce371d6942e9de95ce04

                  SHA512

                  16114ff38a2e2cc59a9bbf420304fda8e558022f385748a5f48c02f037cbe815221a1cb4f0ac1deeb408ebf66ee3e25c059b157c7cc5cb169dbac75a73694fdc

                • C:\ProgramData\Malwarebytes\MBAMService\lkg_db\mbdigsig2.dat

                  Filesize

                  514B

                  MD5

                  cb9f6607be84c12afc4e2254a9ee3265

                  SHA1

                  f37dc67aca546a3efca9eb69477b42f42671a0e9

                  SHA256

                  f9df201d9611dd9e4a6ab34464e0086fd8199f086f7f3879c3ce916ff7d74a8d

                  SHA512

                  0476531419159d29ea030fba47bc2076597f4a368480ef24492fc4a6de76495f65c43be627b9c1a3d8d85da75653a0bbe6266d3db79bc2395880a0f6a9fd9ea6

                • C:\ProgramData\Malwarebytes\MBAMService\lkg_db\prot.mbdb

                  Filesize

                  24B

                  MD5

                  546d9e30eadad8b22f5b3ffa875144bf

                  SHA1

                  3b323ffef009bfe0662c2bd30bb06af6dfc68e4d

                  SHA256

                  6089fbf0c0c1413f62e91dc9497bedc6d8a271e9dc761e20adc0dccf6f4a0c1f

                  SHA512

                  3478f5dcf7af549dd6fe48ad714604200de84a90120b16a32233b6d44fa7240f5f4e5fe803f54b86bbdfd10fa1bfdd88fb85eb6a78e23e426933f98d0a2565ec

                • C:\ProgramData\Malwarebytes\MBAMService\lkg_db\rdefs.mbdb

                  Filesize

                  24B

                  MD5

                  2f7423ca7c6a0f1339980f3c8c7de9f8

                  SHA1

                  102c77faa28885354cfe6725d987bc23bc7108ba

                  SHA256

                  850a4ea37a0fd6f68bf95422d502b2d1257264eb90cc38c0a3b1b95aa375be55

                  SHA512

                  e922ac8a7a2cde6d387f8698207cf5efbd45b646986a090e3549d97a7d552dd74179bd7ac20b7d246ca49d340c4c168982c65b4749df760857810b2358e7eb69

                • C:\ProgramData\Malwarebytes\MBAMService\lkg_db\rules.mbdb

                  Filesize

                  8.4MB

                  MD5

                  a310c065cfb767ea695b621053b93374

                  SHA1

                  cb5cb7e81c40626fb0e76182bfd43629ad21fc83

                  SHA256

                  d1bdbb4c2d64d848606830357d012d0e8760ce9e34cd8f8efcd89eeb4e151d7a

                  SHA512

                  e71aede3506deac70f338111078d047cc67e30fcb56cae253766a5519d3b99d770ef7150837b9070b7ca667cd617c3959e3624fc6aaec570dd6a02551ed36915

                • C:\ProgramData\Malwarebytes\MBAMService\lkg_db\sample.dll

                  Filesize

                  528KB

                  MD5

                  936021397e23fc913c55992ce9468913

                  SHA1

                  d65af889a379f2982b1ebf29d83d2783b9aa0ded

                  SHA256

                  ce7bdd309701942d97bd8cd3c2455a8d37d93b4d9ce4c14986703daf46fab7fb

                  SHA512

                  4fb968bee32b5f2b5a5d1629ec2855dc0150ec6b753e83a457ec704350b1f219b5e1349a75ec41f94757d1ef2de9a020933f8e42566bf6123543b7709ecc3d74

                • C:\ProgramData\Malwarebytes\MBAMService\lkg_db\scan.mbdb

                  Filesize

                  1.0MB

                  MD5

                  b5011b9b5101f05dcd6f8b0bc68fc862

                  SHA1

                  f7f929b627fbaa1f9bee783581246dc79450a1cb

                  SHA256

                  6da3f6a1f6c5d733fb181939e7022ebe8ac27821be009f37dc2dcd82f9187da3

                  SHA512

                  fee3e4d5a4f2bff04f6ba2eabca6e7c7996b4829fbaf5834ecd0034817d555a068040f3249978dec0de2d74ad1fa48fec769cfb65907d34eea733ddadff23986

                • C:\ProgramData\Malwarebytes\MBAMService\lkg_db\tids.mbdb

                  Filesize

                  177KB

                  MD5

                  34a17cc7d36376d2bfc1c62152e5b18e

                  SHA1

                  e5628598f0cb06e5625e238f721ea73a841574ac

                  SHA256

                  2b4c2e7eb136b1b98658fec8c77469230579eee5cb3c750ce348787ebde9808a

                  SHA512

                  9fbc326310023b15bc6c5df1c7aeefc10ec94cd930eb72a0a499f7242ca908da2902ecd7754d825910e2647eb1c3dfe38325ff1822a1e77c6d6049316ee55848

                • C:\ProgramData\Malwarebytes\MBAMService\lkg_db\wprot2.mbdb

                  Filesize

                  41.7MB

                  MD5

                  2665dfe8654385a67b6da7b6c2a0d880

                  SHA1

                  1054c8487d0934d6191ea5c03216cc473f791428

                  SHA256

                  2c767eb2cfc154bacf2f110e82dd0929913c66ca6550a44cd11348e83a4442c8

                  SHA512

                  c2db11067d1acb6d733c7ea788e94fb0aa7457751e7879125ae424cee10a97e0edf1167108f6c2ffd5bb1461869f71ab0757d5a88c83903fd8151ee5e2dfef86

                • C:\ProgramData\Malwarebytes\MBAMService\pkgvers.dat

                  Filesize

                  75B

                  MD5

                  947dc11afea763029f9b732559868f5c

                  SHA1

                  cf7838dba78dee3832f0a3d9ff93c5160f2b44a1

                  SHA256

                  9dc229ba6beb722ab474e37b61d3ba267ad01008f6de057c32829894ea330ef4

                  SHA512

                  0231237cf5711d5ed0991087b778dd7683885ba70a792225e0efb34f2b0c849e48b9969d91947bd9b32d90426e3c4690ab3ed06ab07a77744381eafdf9f4e0bc

                • C:\Windows\System32\CatRoot2\dberr.txt

                  Filesize

                  146KB

                  MD5

                  bf52a69e1451dc4c027fbd68252876c5

                  SHA1

                  43a8308e82a4eecaf3a706a24947abe45afad0ff

                  SHA256

                  75373da06c1b228a61843f50001b9d35783108b6f32d8fb2c7e2784226c1bd23

                  SHA512

                  f4aff63dd18585d9dc9ba0cf290647b405380c47dd07309b08ec3c308de9570606e45e5d76206de37dc95c2a07bf9f440242706f89fe5a0342358337ce8291bb

                • C:\Windows\System32\catroot2\dberr.txt

                  Filesize

                  146KB

                  MD5

                  ce21a17b604500f20b5966a6afcc0ae7

                  SHA1

                  06a9483e115238595f58e288c1593d26ad727378

                  SHA256

                  6bcb47ba2cd4ef939ff99c8af4f2c9f39aaecc347c2dc393ef2e41206beed796

                  SHA512

                  e6a17ac382004513bcb23ea2dd1f047bd75c7116e1b3d1c0720d8fd8c67757efde64a66f73703d02a05ea796890f113b50504d4ad81f154714939d04b301d134

                • C:\Windows\Temp\MBInstallTemp1ff01e112e8211eeacb9c615f1eabc99\7z.dll

                  Filesize

                  1.6MB

                  MD5

                  ab8f0c1a37c0df5c8924aab509db42c9

                  SHA1

                  53dba959124e6d740829bda2360e851bcb85cce8

                  SHA256

                  6e223b275b84d948cc5ae1f161f0bfff2adb34de04634c84d7dbe9305a4998d5

                  SHA512

                  ff8a26e8fd5a08c74e5ba93a564e0d3cd932754e7f06993a365bfad06670497889e69ec45bfba1378040b72f82d468e79682beba2439937bb29d2a41da940d4a

                • C:\Windows\Temp\MBInstallTemp1ff01e112e8211eeacb9c615f1eabc99\7z.dll

                  Filesize

                  1.6MB

                  MD5

                  ab8f0c1a37c0df5c8924aab509db42c9

                  SHA1

                  53dba959124e6d740829bda2360e851bcb85cce8

                  SHA256

                  6e223b275b84d948cc5ae1f161f0bfff2adb34de04634c84d7dbe9305a4998d5

                  SHA512

                  ff8a26e8fd5a08c74e5ba93a564e0d3cd932754e7f06993a365bfad06670497889e69ec45bfba1378040b72f82d468e79682beba2439937bb29d2a41da940d4a

                • C:\Windows\Temp\MBInstallTemp1ff01e112e8211eeacb9c615f1eabc99\ctlrpkg\mbae64.sys

                  Filesize

                  154KB

                  MD5

                  95515708f41a7e283d6725506f56f6f2

                  SHA1

                  9afc20a19db3d2a75b6915d8d9af602c5218735e

                  SHA256

                  321058a27d7462e55e39d253ad5d8b19a9acf754666400f82fe0542f33e733c6

                  SHA512

                  d9230901adeecb13b1f92287abe9317cdac458348885b96ef6500960793a7586c76ae374df053be948a35b44abe934aa853975a6ccd3788f93909903cc718c08

                • C:\Windows\Temp\MBInstallTemp1ff01e112e8211eeacb9c615f1eabc99\servicepkg\MBAMService.exe

                  Filesize

                  8.8MB

                  MD5

                  827d180e861f5a10fa29f6e6b8807a4d

                  SHA1

                  540108d1280b60bd28f5e1fabce38bdcec91e93e

                  SHA256

                  fda3d2617c7cab61e148d08e3d10f3f5468a37eb500b91efecae626f2aaa6c27

                  SHA512

                  6d46063e0c8518c5dc0a8e827d2543d64edc3e20feb113d1de1ebf0c410a37f9ba9098eaefb01e88024bc8cd11c618ffdace2cc0724a2b4788b4dd233cbb8e80

                • C:\Windows\Temp\MBInstallTemp1ff01e112e8211eeacb9c615f1eabc99\servicepkg\mbamelam.cat

                  Filesize

                  10KB

                  MD5

                  60608328775d6acf03eaab38407e5b7c

                  SHA1

                  9f63644893517286753f63ad6d01bc8bfacf79b1

                  SHA256

                  3ed5a1668713ef80c2b5599b599f1434ad6648999f335cf69757ea3183c70c59

                  SHA512

                  9f65212121b8a5d1a0625c3baa14ef04a33b091d26f543324333e38dcdb903e02ccc4d009e22c2e85d2f61d954e0b994c2896e52f685003a6ef34758f8a650c7

                • C:\Windows\Temp\MBInstallTemp1ff01e112e8211eeacb9c615f1eabc99\servicepkg\mbamelam.inf

                  Filesize

                  2KB

                  MD5

                  c481ad4dd1d91860335787aa61177932

                  SHA1

                  81633414c5bf5832a8584fb0740bc09596b9b66d

                  SHA256

                  793626d240fd8eefc81b78a57c8dfe12ea247889b6f07918e9fd32a7411aa1c3

                  SHA512

                  d292e028936412f07264837d4a321ecfa2f5754d4048c8bcf774a0e076e535b361c411301558609d64c71c1ce9b19e6041efa44d201237a7010c553751e1e830

                • C:\Windows\Temp\MBInstallTemp1ff01e112e8211eeacb9c615f1eabc99\servicepkg\mbamelam.sys

                  Filesize

                  20KB

                  MD5

                  9e77c51e14fa9a323ee1635dc74ecc07

                  SHA1

                  a78bde0bd73260ce7af9cdc441af9db54d1637c2

                  SHA256

                  b5619d758ae6a65c1663f065e53e6b68a00511e7d7accb3e07ed94bfd0b1ede0

                  SHA512

                  a12ccf92bead694f5d3cba7ff7e731a2f862198efc338efc7f33a882fe0eb7499fb3fb533538d0a823e80631a7ca162962fbdfd78e401e3255672910b7140186

                • C:\Windows\Temp\MBInstallTemp1ff01e112e8211eeacb9c615f1eabc99\servicepkg\mbshlext.dll

                  Filesize

                  2.7MB

                  MD5

                  b7e5071b317550d93258f7e1e13e7b6f

                  SHA1

                  2d08d78a5c29cf724bc523530d1a9014642bbc60

                  SHA256

                  467de01d7cee7ec54166b80658ff22f9feebdb1c24eaf1629cf40e4124508064

                  SHA512

                  9c35293c95c1a9141740ac99315605964aa37c4a42d3a11cae9e5649ff1427a9480d3d5e7f763212cf13db3511c5ea3c84e68f95f0067fe6339a9d3fb7b27c54

                • C:\Windows\Temp\MBInstallTemp1ff01e112e8211eeacb9c615f1eabc99\uipkg\QtQuick\Controls.2\HorizontalHeaderView.qml

                  Filesize

                  1KB

                  MD5

                  d8c9674c0e9bddbd8aa59a9d343cf462

                  SHA1

                  490aa022ac31ddce86d5b62f913b23fbb0de27c2

                  SHA256

                  1ef333b5fb4d8075973f312ef787237240b9f49f3f9185fb21202883f900e7d7

                  SHA512

                  0b86ec673133f6400c38b79f9ba4f7b37ce5afdab1a2e34acbf75019e2590cc26b26d323ddc1567c91375053c9c8593be0615389db8eb1a8d1eb084ad4200b82

                • C:\Windows\Temp\MBInstallTemp1ff01e112e8211eeacb9c615f1eabc99\uipkg\QtQuick\Controls.2\Imagine\VerticalHeaderView.qml

                  Filesize

                  1KB

                  MD5

                  829769b2741d92df3c5d837eee64f297

                  SHA1

                  f61c91436ca3420c4e9b94833839fd9c14024b69

                  SHA256

                  489c02f8716e7a1de61834b3d8bbb61bce91ca4a33a6b62342b4c851d93e51e0

                  SHA512

                  4061c271db37523b9dea9a9973226d91337e1809d4e7767e57ac938d35d77a302363ed92ab4be18c35ba589f528194ad71c93a8507449bf74dd035acf7cdb521

                • memory/2692-4921-0x00007FF9C2720000-0x00007FF9C2C8B000-memory.dmp

                  Filesize

                  5.4MB

                • memory/2692-4920-0x00007FF9C2C90000-0x00007FF9C30AE000-memory.dmp

                  Filesize

                  4.1MB

                • memory/3052-4663-0x0000024709470000-0x0000024709472000-memory.dmp

                  Filesize

                  8KB

                • memory/3052-4511-0x00007FF9C2720000-0x00007FF9C2C8B000-memory.dmp

                  Filesize

                  5.4MB

                • memory/3052-4655-0x0000024709450000-0x0000024709451000-memory.dmp

                  Filesize

                  4KB

                • memory/3052-4654-0x0000024709450000-0x0000024709451000-memory.dmp

                  Filesize

                  4KB

                • memory/3052-4656-0x0000024709450000-0x0000024709451000-memory.dmp

                  Filesize

                  4KB

                • memory/3052-4658-0x0000024709460000-0x0000024709461000-memory.dmp

                  Filesize

                  4KB

                • memory/3052-4660-0x0000024709460000-0x0000024709461000-memory.dmp

                  Filesize

                  4KB

                • memory/3052-4659-0x0000024709460000-0x0000024709461000-memory.dmp

                  Filesize

                  4KB

                • memory/3052-4661-0x0000024709460000-0x0000024709461000-memory.dmp

                  Filesize

                  4KB

                • memory/3052-4662-0x0000024709460000-0x0000024709461000-memory.dmp

                  Filesize

                  4KB

                • memory/3052-4518-0x0000024708920000-0x0000024708B20000-memory.dmp

                  Filesize

                  2.0MB

                • memory/3052-4516-0x00000247084E0000-0x0000024708920000-memory.dmp

                  Filesize

                  4.2MB

                • memory/3052-4665-0x0000024709470000-0x0000024709472000-memory.dmp

                  Filesize

                  8KB

                • memory/3052-4510-0x00007FF9C2C90000-0x00007FF9C30AE000-memory.dmp

                  Filesize

                  4.1MB

                • memory/3052-4667-0x0000024709480000-0x0000024709482000-memory.dmp

                  Filesize

                  8KB

                • memory/3052-4513-0x0000024707700000-0x0000024707710000-memory.dmp

                  Filesize

                  64KB

                • memory/4308-3482-0x000002359CCE0000-0x000002359D27A000-memory.dmp

                  Filesize

                  5.6MB

                • memory/4308-4753-0x000002359CCE0000-0x000002359D27A000-memory.dmp

                  Filesize

                  5.6MB

                • memory/4308-4548-0x000002359CCE0000-0x000002359D27A000-memory.dmp

                  Filesize

                  5.6MB

                • memory/4920-4668-0x00007FF627E80000-0x00007FF62955D000-memory.dmp

                  Filesize

                  22.9MB

                • memory/4920-4676-0x0000025C0C8E0000-0x0000025C0C8F0000-memory.dmp

                  Filesize

                  64KB

                • memory/4920-4669-0x00007FF9C2C90000-0x00007FF9C30AE000-memory.dmp

                  Filesize

                  4.1MB

                • memory/4920-4670-0x00007FF9C2720000-0x00007FF9C2C8B000-memory.dmp

                  Filesize

                  5.4MB

                • memory/4920-4835-0x0000025C0C8E0000-0x0000025C0C8F0000-memory.dmp

                  Filesize

                  64KB